urlquery - report: caseid100523456345345345.firebaseapp.com/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
kit.fontawesome.com (1)	1868	2019-12-16 19:51:31 UTC	2020-10-22 17:14:21 UTC	104.18.22.52
ocsp.digicert.com (5)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-12 06:07:04 UTC	34.102.187.140
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	34.218.168.248
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-12 05:57:21 UTC	34.117.237.239
e1.o.lencr.org (2)	6159	No data	No data	23.36.77.32
cdn.jsdelivr.net (2)	439	2012-09-30 00:15:09 UTC	2020-08-10 12:12:39 UTC	151.101.85.229
ipapi.co (1)	195030	2017-01-31 09:07:01 UTC	2022-11-12 11:21:09 UTC	104.26.8.44
ocsp.sectigo.com (1)	487	2019-11-29 11:50:24 UTC	2021-09-17 20:05:40 UTC	172.64.155.188
api.ipify.org (1)	3267	2015-05-03 03:57:18 UTC	2020-03-11 13:27:58 UTC	52.20.78.240
ka-f.fontawesome.com (4)	3598	2019-12-17 06:36:13 UTC	2020-09-25 12:57:14 UTC	172.64.203.28
caseid100523456345345345.firebaseapp.com (2)	0	2022-11-12 21:57:10 UTC	2022-11-12 21:57:10 UTC	199.36.158.100	Unknown ranking
fbcaseid.1005610265198415620.com (5)	0	2022-11-10 19:56:43 UTC	2022-11-12 21:33:32 UTC	172.67.182.224	Unknown ranking
ajax.googleapis.com (1)	12905	2013-08-16 09:51:31 UTC	2022-11-12 17:17:05 UTC	216.58.207.202
ocsp.globalsign.com (1)	2075	2012-07-20 17:46:16 UTC	2020-05-02 20:58:10 UTC	104.18.21.226
r3.o.lencr.org (5)	344	No data	No data	23.36.76.226
ocsp.pki.goog (2)	175	2018-07-01 06:43:07 UTC	2020-05-02 20:58:16 UTC	142.250.74.35
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76

Scan Date	Severity	Indicator	Comment
2022-11-12	2	1005610265198415620.com	Sinkholed
2022-11-12	2	1005610265198415620.com	Sinkholed
2022-11-12	2	1005610265198415620.com	Sinkholed
2022-11-12	2	1005610265198415620.com	Sinkholed
2022-11-12	2	1005610265198415620.com	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-01-31 11:55:31 +0000	0 - 0 - 2	business-meta-page-1098692137.web.app/	199.36.158.100
2023-01-31 11:12:30 +0000	0 - 0 - 6	cms-thingslabo.web.app/	199.36.158.100
2023-01-31 09:22:25 +0000	0 - 0 - 6	track-id8982.web.app/	199.36.158.100
2023-01-31 08:39:10 +0000	0 - 0 - 3	onmsn4.web.app/R3w2vTanganiban07xR3witR3wH05d (...)	199.36.158.100
2023-01-31 08:26:00 +0000	0 - 0 - 8	steve-optikinetics-document.firebaseapp.com/	199.36.158.100

Date	UQ / IDS / BL	URL	IP
2023-01-31 12:23:39 +0000	0 - 0 - 2	byochange.org/wp-admin/css/colors/light/wlsh0 (...)	151.101.194.159
2023-01-31 12:17:43 +0000	0 - 12 - 0	mdpr.jp/cinema/detail/3581119	151.101.194.132
2023-01-31 11:55:31 +0000	0 - 0 - 2	business-meta-page-1098692137.web.app/	199.36.158.100
2023-01-31 11:43:20 +0000	0 - 1 - 0	raw.githubusercontent.com/mandiant/flare-vm/m (...)	185.199.111.133
2023-01-31 11:40:05 +0000	0 - 1 - 0	lmi-research.org.za/wp-content/uploads/2022/0 (...)	151.101.66.159

Date	UQ / IDS / BL	URL	IP
2022-11-12 21:59:58 +0000	0 - 0 - 5	caseid100523456345345345.firebaseapp.com/	199.36.158.100

Date	UQ / IDS / BL	URL	IP
2022-11-10 02:38:14 +0000	0 - 0 - 7	caseid1007859469834578546.web.app/	199.36.158.100
2022-11-09 05:51:42 +0000	0 - 0 - 6	caseid100615086501986510269.firebaseapp.com/	199.36.158.100
2022-11-06 05:37:41 +0000	0 - 0 - 10	caseid10098510296320.web.app/	199.36.158.100
2022-10-23 02:30:16 +0000	0 - 0 - 5	case10064209612945129645.web.app/	199.36.158.100
2022-10-22 09:38:45 +0000	0 - 0 - 7	case10012016528156230526.firebaseapp.com/	199.36.158.100

Request	Response
GET / HTTP/1.1 Host: caseid100523456345345345.firebaseapp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: caseid100523456345345345.firebaseapp.com/ FQDN: caseid100523456345345345.firebaseapp.com IP: 199.36.158.100 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 199.36.158.100 HTTP/1.1 301 Moved Permanently Connection: close Content-Length: 0 Server: Varnish Retry-After: 0 Location: https://caseid100523456345345345.firebaseapp.com/ Accept-Ranges: bytes Date: Sat, 12 Nov 2022 21:59:47 GMT X-Served-By: cache-bma1648-BMA X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1668290387.371711,VS0,VE0 alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF" Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14342 Expires: Sun, 13 Nov 2022 01:58:49 GMT Date: Sat, 12 Nov 2022 21:59:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3d0727e32cd103ddd4b73f28c81758aa Sha1: 197a7bf43d63723fc532c23c6dced68d5cc36652 Sha256: d3f75d03561d6a47d19370292e821a86e58381466f0c69386a21175de55882ff
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: ed5c27510100ffc4481be474ebcb020d147c645beb110604d5284eeeb8b97c02 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02" Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10490 Expires: Sun, 13 Nov 2022 00:54:37 GMT Date: Sat, 12 Nov 2022 21:59:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a8391107bfc5e4673e8a706f90f63768 Sha1: 5295ed0b1cb8bad4d3e851049acc7f0270937d12 Sha256: ed5c27510100ffc4481be474ebcb020d147c645beb110604d5284eeeb8b97c02
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 86f57134ddebd23a25615dc4d59c4b1ca8919e3e0495e1f006cbe7c0f39aa27e 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5540 Cache-Control: max-age=137028 Date: Sat, 12 Nov 2022 21:59:47 GMT Etag: "636f75f3-1d7" Expires: Mon, 14 Nov 2022 12:03:35 GMT Last-Modified: Sat, 12 Nov 2022 10:31:15 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: de470c6bab46e7c4b7cc69f392900fe7 Sha1: 189e4dcc4c2b8bf1f050e06bd68bce8a99618918 Sha256: 86f57134ddebd23a25615dc4d59c4b1ca8919e3e0495e1f006cbe7c0f39aa27e
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: v/qrMPkaEsNqX5baoY3Wq1Mo2n7ovXUoyEt1RXsIteXIMOxb1ApEv5fzZCQnG05icQtvpxGvzHM= x-amz-request-id: 17PTNYMAF625R1Z0 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sat, 12 Nov 2022 21:13:08 GMT age: 2799 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 67d5a988edcda47bc3b3b3f65d32b4b6 Sha1: d4f0e0da8b3690cc7da925026d3414b68c7d954f Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sat, 12 Nov 2022 21:44:03 GMT cache-control: public,max-age=3600 age: 944 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 4736bac84ca28f2b1e961159fb4ea098 Sha1: 1319612979f53896fcfeacd4215c2715d4951e4c Sha256: 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET / HTTP/1.1 Host: caseid100523456345345345.firebaseapp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: caseid100523456345345345.firebaseapp.com/ FQDN: caseid100523456345345345.firebaseapp.com IP: 199.36.158.100 HASH: 20fde889bce41c5b7e5765817dce68f8c2be4bd5febd7a49b312706847e0825a 199.36.158.100 HTTP/2 200 OK content-type: text/html; charset=utf-8 cache-control: max-age=3600 content-encoding: br etag: "fe13cb58b15a5fc6da884e183b6e0333314e7b1b0b29fe8a5539c92108480488-br" last-modified: Fri, 11 Nov 2022 18:02:51 GMT strict-transport-security: max-age=31556926; includeSubDomains; preload accept-ranges: bytes date: Sat, 12 Nov 2022 21:59:47 GMT x-served-by: cache-bma1660-BMA x-cache: MISS x-cache-hits: 0 x-timer: S1668290388.608373,VS0,VE51 vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 131 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 131 Md5: d1b9e1845f07b6973e3d0203321a5f5c Sha1: 31d461aa15525c74b6e64882c92fdba3f9476b64 Sha256: 20fde889bce41c5b7e5765817dce68f8c2be4bd5febd7a49b312706847e0825a
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sat, 12 Nov 2022 21:59:47 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST /s/gts1d4int/xv7Q07ZM-NY HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/s/gts1d4int/xv7Q07ZM-NY FQDN: ocsp.pki.goog IP: 142.250.74.35 HASH: 24650980ae365953191aee977ca99fac00d5bbceb8550beb83fd5c0df0ad044c 142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 12 Nov 2022 21:59:47 GMT Cache-Control: public, max-age=14400 Server: scaffolding on HTTPServer2 Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 4058e34f09b70cd844f184232cf9eae4 Sha1: 2cb0338f67b7a89df5137163dcc11d856e06e21b Sha256: 24650980ae365953191aee977ca99fac00d5bbceb8550beb83fd5c0df0ad044c
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 2bcc7b7830a4a0b47ffa2756e86eeb4089733149fdf1a7231bd85c804f2ad523 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 346 ETag: "2BCC7B7830A4A0B47FFA2756E86EEB4089733149FDF1A7231BD85C804F2AD523" Last-Modified: Thu, 10 Nov 2022 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21580 Expires: Sun, 13 Nov 2022 03:59:28 GMT Date: Sat, 12 Nov 2022 21:59:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 346 Md5: 1009c3e599db228213302326fb3382d3 Sha1: 054fb55ad94b88854e57f3b3082530fa51393578 Sha256: 2bcc7b7830a4a0b47ffa2756e86eeb4089733149fdf1a7231bd85c804f2ad523
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sat, 12 Nov 2022 21:25:00 GMT cache-control: public,max-age=3600 age: 2088 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /cdn-cgi/images/trace/jsch/js/transparent.gif?ray=7692896d8a001c02 HTTP/1.1 Host: fbcaseid.1005610265198415620.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://fbcaseid.1005610265198415620.com/?fbclid=10058620984209812085 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: fbcaseid.1005610265198415620.com/cdn-cgi/images/trace/j (...) FQDN: fbcaseid.1005610265198415620.com IP: 172.67.182.224 HASH: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 172.67.182.224 HTTP/2 200 OK content-type: image/gif date: Sat, 12 Nov 2022 21:59:48 GMT content-length: 42 last-modified: Wed, 09 Nov 2022 12:51:41 GMT etag: "636ba25d-2a" server: cloudflare cf-ray: 7692896f1b701c02-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Sat, 12 Nov 2022 23:59:48 GMT cache-control: max-age=7200, public accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 Alerts: Blocklists: - quad9: Sinkholed
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: dc43a04e1e26243f63a8e628f2ebcb23a9527fd4bc40dc6d1d61879b0f95bb21 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2775 Cache-Control: max-age=129199 Date: Sat, 12 Nov 2022 21:59:48 GMT Etag: "636f622c-1d7" Expires: Mon, 14 Nov 2022 09:53:07 GMT Last-Modified: Sat, 12 Nov 2022 09:06:52 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: ae51f1958554de4457c22a7d5a9ba8b6 Sha1: 173e90a8c6ee36b7ec569dbea47436a90d7e7c76 Sha256: dc43a04e1e26243f63a8e628f2ebcb23a9527fd4bc40dc6d1d61879b0f95bb21
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 2bcc7b7830a4a0b47ffa2756e86eeb4089733149fdf1a7231bd85c804f2ad523 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 346 ETag: "2BCC7B7830A4A0B47FFA2756E86EEB4089733149FDF1A7231BD85C804F2AD523" Last-Modified: Thu, 10 Nov 2022 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21580 Expires: Sun, 13 Nov 2022 03:59:28 GMT Date: Sat, 12 Nov 2022 21:59:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 346 Md5: 1009c3e599db228213302326fb3382d3 Sha1: 054fb55ad94b88854e57f3b3082530fa51393578 Sha256: 2bcc7b7830a4a0b47ffa2756e86eeb4089733149fdf1a7231bd85c804f2ad523
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: x5umwd2Ue/1K0RBoDNzVOg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 34.218.168.248 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 34.218.168.248 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: /lPCIKv6iFWNPDEkHe6afJFkls4= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1 Host: fbcaseid.1005610265198415620.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://fbcaseid.1005610265198415620.com/?fbclid=10058620984209812085 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: fbcaseid.1005610265198415620.com/favicon.ico FQDN: fbcaseid.1005610265198415620.com IP: 172.67.182.224 HASH: 7ed22bafd8036c98409d00b2a33a4c5478591242cb800201ee60b9da72bd31b5 172.67.182.224 HTTP/2 404 Not Found content-type: text/html date: Sat, 12 Nov 2022 21:59:48 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-turbo-charged-by: LiteSpeed cf-cache-status: BYPASS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P3nYtwRgQjN%2B4VlWjIow8Ov1oEO0sW0gqt8rUloTGerAR%2BdQj11Pe%2BXY0bKzAJiDoKGrs2ovF%2B3o%2BrrVXuYs%2FmaSCl4cp6w7iGmMfsB3vf3J%2Br2mUXBKzuSMctghrweISsTVQ1BePGqVf6%2FJx%2BGwViPCZg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7692896edb1f1c02-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size: 5257 Md5: cd97799a2a93f7741eb5c2df2f7c16e9 Sha1: 7f8479f4ab2fbe6ddf47c90311c1fc806d8418e1 Sha256: 7ed22bafd8036c98409d00b2a33a4c5478591242cb800201ee60b9da72bd31b5 Alerts: Blocklists: - quad9: Sinkholed
GET /cdn-cgi/challenge-platform/h/b/orchestrate/jsch/v1?ray=7692896d8a001c02 HTTP/1.1 Host: fbcaseid.1005610265198415620.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://fbcaseid.1005610265198415620.com/?fbclid=10058620984209812085&__cf_chl_rt_tk=Hyc9v8ApWWQb81GO7Wgvq2uCloZnOBk_0Ode6oUM7FM-1668290388-0-gaNycGzNCD0 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: fbcaseid.1005610265198415620.com/cdn-cgi/challenge-plat (...) FQDN: fbcaseid.1005610265198415620.com IP: 172.67.182.224 HASH: 8ee59f4a47907f1fb5d68a66e92e817c00cb83f918a205c13dedb0803b5edbca 172.67.182.224 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 date: Sat, 12 Nov 2022 21:59:48 GMT cache-control: max-age=0, must-revalidate report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RAzaqxk7GyL9OwNyaebtl6vFfiUpJ0LHzSE3gdcyknDjXDK34X21uO0OdojYfaID0n0M3uoo8uny6kHqfkYAgBo6%2BpbFvsTjplwnioC5cQPszBSdR1B4mOtSqhRuVUT85wqkIvnD7on22hck3v0GzFiV7w%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 7692896f1b721c02-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (56077), with no line terminators Size: 25139 Md5: e2e8bc7d1fca608aebe9bf9679a7cfe1 Sha1: a4b7601babb47639f5e619085dece891a654e786 Sha256: 8ee59f4a47907f1fb5d68a66e92e817c00cb83f918a205c13dedb0803b5edbca Alerts: Blocklists: - quad9: Sinkholed
GET /npm/bootstrap@4.4.1/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Referer: https://fbcaseid.1005610265198415620.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdn.jsdelivr.net/npm/bootstrap@4.4.1/dist/css/bootstrap (...) FQDN: cdn.jsdelivr.net IP: 151.101.85.229 HASH: 57f3cf211e044d6778aac4aec7f690adfa7dc6a20001a4bec166859d9e184129 151.101.85.229 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 4.4.1 x-jsd-version-type: version etag: W/"26f1b-0wURD7eRE6lhOUtDPYUaNBA0K4w" content-encoding: gzip accept-ranges: bytes date: Sat, 12 Nov 2022 21:59:49 GMT age: 14245675 x-served-by: cache-fra19134-FRA, cache-bma1639-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 23674 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65324) Size: 23674 Md5: 31797921718705c3da1d6a8861211ab6 Sha1: 458e8d45976fd543e7933c24157a6675dfa0610d Sha256: 57f3cf211e044d6778aac4aec7f690adfa7dc6a20001a4bec166859d9e184129
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://fbcaseid.1005610265198415620.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js FQDN: ajax.googleapis.com IP: 216.58.207.202 HASH: 8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054 216.58.207.202 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 31017 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sat, 12 Nov 2022 20:49:28 GMT expires: Sun, 12 Nov 2023 20:49:28 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 last-modified: Wed, 10 Mar 2021 14:28:09 GMT age: 4221 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65447) Size: 31017 Md5: 7808e0e4b7a714230373852158500533 Sha1: 4a79d18722a68a2f38d52e2d3a11b550bdd30b3c Sha256: 8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054
GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Referer: https://fbcaseid.1005610265198415620.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap. (...) FQDN: cdn.jsdelivr.net IP: 151.101.85.229 HASH: 1a00d92371bb1b61d8fdce1473af8c69798eaa34ee7941f58babd75c8283d56d 151.101.85.229 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 5.0.2 x-jsd-version-type: version etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0" content-encoding: gzip accept-ranges: bytes date: Sat, 12 Nov 2022 21:59:49 GMT age: 20436745 x-served-by: cache-fra19122-FRA, cache-bma1639-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 22442 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65299) Size: 22442 Md5: 84e585e508257b149cf52b5ba65dafba Sha1: 141cd4a3560a4dd2b4fdf9e961079c300f494030 Sha256: 1a00d92371bb1b61d8fdce1473af8c69798eaa34ee7941f58babd75c8283d56d
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 FQDN: ocsp.globalsign.com IP: 104.18.21.226 HASH: c56f055ae74eabbd93da9a259bd1a20b2132be192e673c82e9b5c26fc7b03eea 104.18.21.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 12 Nov 2022 21:59:49 GMT Transfer-Encoding: chunked Connection: keep-alive Etag: "61550B89F284FE032EF24939753DFAA8B7746214" Expires: Sun, 13 Nov 2022 08:00:00 GMT Last-Modified: Sat, 12 Nov 2022 20:00:00 UTC Cache-Control: s-maxage=3600, public, no-transform, must-revalidate CF-Cache-Status: HIT Age: 2342 Vary: Accept-Encoding Server: cloudflare CF-RAY: 76928977ba66b50b-OSL --- Additional Info --- Magic: data Size: 1462 Md5: 69b6fbfcc7d7f85302467aa1ec9286fb Sha1: f10ecf55c78d371ed379cd254b869ac25fcc96f0 Sha256: c56f055ae74eabbd93da9a259bd1a20b2132be192e673c82e9b5c26fc7b03eea
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.35 HASH: 6c3df7e6d0a8491fe24c03df2ccba059ba2f84155a680a4a22f217d3870cff95 142.250.74.35 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 12 Nov 2022 21:59:49 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 4b46bbcd35c85c4678b0e3e409bba3bc Sha1: bb0705335e28414345ad5fcdd61104cf2fbbbbc4 Sha256: 6c3df7e6d0a8491fe24c03df2ccba059ba2f84155a680a4a22f217d3870cff95
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 1e73985b43d60823ae979e6d957df2b26c7f2b7e9dadb6579e002cad43ff9f33 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5583 Cache-Control: max-age=150033 Date: Sat, 12 Nov 2022 21:59:49 GMT Etag: "636fa897-118" Expires: Mon, 14 Nov 2022 15:40:22 GMT Last-Modified: Sat, 12 Nov 2022 14:07:19 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: 6ce8d18e959322d5c3934bcbc4f95edc Sha1: f0e6ac15ccb3040a8d9852195c64cea7dbeeb04c Sha256: 1e73985b43d60823ae979e6d957df2b26c7f2b7e9dadb6579e002cad43ff9f33
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3459 Expires: Sat, 12 Nov 2022 22:57:28 GMT Date: Sat, 12 Nov 2022 21:59:49 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb29db48daab83bcaed56b72093619cc Sha1: e0e0a09d729ffb1c41411419768896f1e1eb3346 Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3459 Expires: Sat, 12 Nov 2022 22:57:28 GMT Date: Sat, 12 Nov 2022 21:59:49 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb29db48daab83bcaed56b72093619cc Sha1: e0e0a09d729ffb1c41411419768896f1e1eb3346 Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3458 Expires: Sat, 12 Nov 2022 22:57:28 GMT Date: Sat, 12 Nov 2022 21:59:50 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb29db48daab83bcaed56b72093619cc Sha1: e0e0a09d729ffb1c41411419768896f1e1eb3346 Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80441337-327d-4d34-9fe8-53269c39ac18.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 25075ef6337bae8e60412cdca98afbae6aca61d889aadce4cbad4a8522f4c4b1 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7867 x-amzn-requestid: e05d4978-6f46-4395-8121-4d969a222328 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bgfLqFWIoAMF01A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6370124a-4033150d0180e56e2965e26e;Sampled=0 x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:18 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: YDkJ7OIcS3FiDPufRTj5VtL5CMxbNN2o2Zq50QQ9UNeDw4uE4j3jrw== via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google date: Sat, 12 Nov 2022 21:54:29 GMT age: 321 etag: "a9922959c532dd26f21bda4f74ee1fa8496e862e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7867 Md5: 26249508ef18eac51cf62cf6e90339a4 Sha1: a9922959c532dd26f21bda4f74ee1fa8496e862e Sha256: 25075ef6337bae8e60412cdca98afbae6aca61d889aadce4cbad4a8522f4c4b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcda76b4a-e2cf-4a4f-903b-a939ac862b71.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 6b04a734b7e10e329df43e107462906f1690c95783cad69d56a412955b88d66e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11388 x-amzn-requestid: 476bbb49-4bd4-408f-b82f-3dfd52dcf7ba x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bgfNdEYsoAMF0HA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63701255-06630c41353045dc5e5d58b8;Sampled=0 x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:29 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: -wI4Gprap42Eewd0DwppPQcSN4Bj5LX-PDAGk-eo-UCk8TuX_Dd9_A== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google date: Sat, 12 Nov 2022 21:54:29 GMT age: 352 etag: "58ebbd459c47d5f773da1da77f370286e006ae30" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11388 Md5: 3fd9f2cf5d5cbda75b55b310034f8294 Sha1: 58ebbd459c47d5f773da1da77f370286e006ae30 Sha256: 6b04a734b7e10e329df43e107462906f1690c95783cad69d56a412955b88d66e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a09e7de-c2b9-4cf4-a032-cdce1be83c46.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7a4b252d81b5ee8a8904aeb572110e78d5ecc3e80c11ead3158d863784bcbff1 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7394 x-amzn-requestid: 78860ce6-f1ce-40a6-a901-3630dcdd6c3b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bekDRHb6oAMFU_A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-636f4d47-1534ce03076a581f5721b4ba;Sampled=0 x-amzn-remapped-date: Sat, 12 Nov 2022 07:37:43 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: s7Qs5JcCh9H0SevsGfU4qw5PrtDxFPsa5o6HPXIuHHY7NzYcn8guAg== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google date: Sat, 12 Nov 2022 21:54:29 GMT age: 321 etag: "32b8ed02d309d66ac642683470d5f799e22afeaf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7394 Md5: bed1df7954a5380cf2c090a4a20e3035 Sha1: 32b8ed02d309d66ac642683470d5f799e22afeaf Sha256: 7a4b252d81b5ee8a8904aeb572110e78d5ecc3e80c11ead3158d863784bcbff1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56802217-f3db-4036-987b-8614bd4098ef.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fc6c3a8ac5268b1f646fc397e0d8630bb16df39a6c8a19e952417723062dbb51 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9089 x-amzn-requestid: 6abc1d88-e1db-4bd3-add1-89bf9e31c836 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bgfLrHNpoAMFyYA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6370124a-7c19aafb547d2f1c0f861f2c;Sampled=0 x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:18 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: 1s6DaqcGwm6NJQpHHDlRqK2kVgPY7-wfh8ltzXzrnrdAbq_wAOEcWg== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google date: Sat, 12 Nov 2022 21:54:29 GMT age: 321 etag: "ef661c6f2999fe153d92a1c51208f08289236df6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9089 Md5: 271563e0590df14c6116ae1925628b82 Sha1: ef661c6f2999fe153d92a1c51208f08289236df6 Sha256: fc6c3a8ac5268b1f646fc397e0d8630bb16df39a6c8a19e952417723062dbb51
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff186777a-5327-41b7-9918-a7c7b298fdaf.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b42dba826012a7c62aeb1869e53b896b47aaca8a278952771560a2234b45563a 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 2753 x-amzn-requestid: 4564ab0e-5b18-4958-983e-e847272f3ed4 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bes3HECWoAMFcPw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-636f5b60-2b9a73bd648cf08c3d851799;Sampled=0 x-amzn-remapped-date: Sat, 12 Nov 2022 08:37:52 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Ua0TzVb8Q4i_4sIgvNYbYEF37AkzvvOM4rk_D8_RIfSWrKEXMq7rkQ== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google date: Sat, 12 Nov 2022 21:54:29 GMT age: 13417 etag: "92a599f4dd1df4a38cca5e095790f787f442d2a2" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 2753 Md5: c6caf0847d9e16ba6710405aadf02f01 Sha1: 92a599f4dd1df4a38cca5e095790f787f442d2a2 Sha256: b42dba826012a7c62aeb1869e53b896b47aaca8a278952771560a2234b45563a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13f1630e-d21f-4f16-8990-798920b90e02.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 027d57074d662088658af176b9f5cbd017b5f8f3606fcb8cea2f143cd7736b7e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5018 x-amzn-requestid: 9e8e1034-478d-46da-9bf9-b5a4798ff09a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: benOQHszIAMFhZw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-636f525b-3c5a78755099e8465a89d6c3;Sampled=0 x-amzn-remapped-date: Sat, 12 Nov 2022 07:59:23 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: sqoUAlONIsPhyLsjkzLlFfGejRvKAM4MaILN2KIf-q3Amlf6I4IB0w== via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Sat, 12 Nov 2022 19:37:06 GMT age: 8564 etag: "2ec4f95fcc2f343613d6bb659f6b58b541f426e6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5018 Md5: 963e34ce83d464bdc36f27599567a6b2 Sha1: 2ec4f95fcc2f343613d6bb659f6b58b541f426e6 Sha256: 027d57074d662088658af176b9f5cbd017b5f8f3606fcb8cea2f143cd7736b7e
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 1e73985b43d60823ae979e6d957df2b26c7f2b7e9dadb6579e002cad43ff9f33 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5584 Cache-Control: max-age=150033 Date: Sat, 12 Nov 2022 21:59:50 GMT Etag: "636fa897-118" Expires: Mon, 14 Nov 2022 15:40:23 GMT Last-Modified: Sat, 12 Nov 2022 14:07:19 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: 6ce8d18e959322d5c3934bcbc4f95edc Sha1: f0e6ac15ccb3040a8d9852195c64cea7dbeeb04c Sha256: 1e73985b43d60823ae979e6d957df2b26c7f2b7e9dadb6579e002cad43ff9f33
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 7f19e7c3e6dad9c2250dbb6ccc40f4b6b3a098a02ea3c1a7e50c5ccff6c115d0 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1102 Cache-Control: max-age=132551 Date: Sat, 12 Nov 2022 21:59:50 GMT Etag: "636f75cf-118" Expires: Mon, 14 Nov 2022 10:49:01 GMT Last-Modified: Sat, 12 Nov 2022 10:30:39 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 280 --- Additional Info --- Magic: data Size: 280 Md5: 623991a4554f0453e80e554f976b04bc Sha1: 69b0f4452cfb824c8ffe11171982b04c94b3f7c5 Sha256: 7f19e7c3e6dad9c2250dbb6ccc40f4b6b3a098a02ea3c1a7e50c5ccff6c115d0
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sectigo.com/ FQDN: ocsp.sectigo.com IP: 172.64.155.188 HASH: 0af3e490ad1e4b1b87adcf78665d83649e9c31c6be3b1bc0b4618c15785d0fe5 172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 12 Nov 2022 21:59:50 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Wed, 09 Nov 2022 21:46:12 GMT Expires: Wed, 16 Nov 2022 21:46:11 GMT Etag: "b4cd2db52e46d12d3cd8754639f3ebca8a10c124" Cache-Control: max-age=344180,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb3 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7692897b2abd0b55-OSL --- Additional Info --- Magic: data Size: 16940 Md5: 0c6b8a5967c06d7f1be7bf4617e690d1 Sha1: d4d74f4ca506e9b5e2c34aff124329f0da87f10b Sha256: 0af3e490ad1e4b1b87adcf78665d83649e9c31c6be3b1bc0b4618c15785d0fe5
GET /?format=json HTTP/1.1 Host: api.ipify.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Referer: https://fbcaseid.1005610265198415620.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: api.ipify.org/?format=json FQDN: api.ipify.org IP: 52.20.78.240 HASH: 5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65 52.20.78.240 HTTP/1.1 200 OK Content-Type: application/json Server: Cowboy Connection: keep-alive Access-Control-Allow-Origin: https://fbcaseid.1005610265198415620.com Vary: Origin Date: Sat, 12 Nov 2022 21:59:50 GMT Content-Length: 21 Via: 1.1 vegur --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 21 Md5: 7d69c71af0f191e9a72db6153f8018d1 Sha1: f67c5f2887bc05654b47f76e9621e53a4091aed1 Sha256: 5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65
GET /releases/v6.2.0/webfonts/free-fa-solid-900.woff2 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Referer: https://fbcaseid.1005610265198415620.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: ka-f.fontawesome.com/releases/v6.2.0/webfonts/free-fa-s (...) FQDN: ka-f.fontawesome.com IP: 172.64.203.28 HASH: ad28ece0bf48b1488c82aaf700201d7f6b56a62e11b5b6a0a12481780c8a3417 172.64.203.28 HTTP/2 200 OK content-type: font/woff2 date: Sat, 12 Nov 2022 21:59:50 GMT content-length: 150456 access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Tue, 30 Aug 2022 16:15:00 GMT etag: "822fa3f2f51f169c970f713b88158737" cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token x-cache: Hit from cloudfront via: 1.1 da882a3066261fe68bc0e26348bba540.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P8 x-amz-cf-id: L6u-jTZbRnE9WAHr2R3U9PSBowocPlXDxJnO4OlUW6_2DB2QBP41OQ== cf-cache-status: MISS accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lDKt4MXf7InTIQ69pWXjSPsLgqB3YXDO8%2BmZJcXtGer1VRziGGiZutwvZRFmELqGLcZoMo1DjklsKTWDTtZcT02DMYYwTNRWe7s316rdT8DT3fHLZvtPFCkkvQxbO2RrNSOCDRPW4g%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 76928979ddea88a9-LHR alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 150456, version 770.256\012- data Size: 150456 Md5: 822fa3f2f51f169c970f713b88158737 Sha1: 74b5ddde927a0f84883fed55a65ffbb6ada11761 Sha256: ad28ece0bf48b1488c82aaf700201d7f6b56a62e11b5b6a0a12481780c8a3417
GET /releases/v6.2.0/css/free.min.css?token=83fd8385f7 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://fbcaseid.1005610265198415620.com/ Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: ka-f.fontawesome.com/releases/v6.2.0/css/free.min.css?t (...) FQDN: ka-f.fontawesome.com IP: 172.64.203.28 172.64.203.28 HTTP/2 200 OK content-type: text/css date: Sat, 12 Nov 2022 21:59:49 GMT access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Tue, 30 Aug 2022 16:04:58 GMT etag: W/"0fb4e5b70c498af98f246511192b899d" cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 728b6476f3e2317ec8044d22806d4f94.cloudfront.net (CloudFront) x-amz-cf-pop: LHR50-P1 x-amz-cf-id: HfKa2CAnn9RCxoN6ek1XsZWo7T5YbM3erTUDJMv4i_vA7e-Yx4MUwA== age: 175939 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GnZVZS%2FTCDNkMWJ74C2ugBXxud3Tj8nIvIly4TioM8K4E%2BRA5yQ0CHqEPbuc89RR%2BsYKBXd7p%2FgOzaUapoe48OuOKef2kTeNcMFI3M%2FuORe703TFXMyu15cEw3sfg0u16O2gs57LSQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 769289794ce288a9-LHR content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /releases/v6.2.0/css/free-v5-font-face.min.css?token=83fd8385f7 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://fbcaseid.1005610265198415620.com/ Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: ka-f.fontawesome.com/releases/v6.2.0/css/free-v5-font-f (...) FQDN: ka-f.fontawesome.com IP: 172.64.203.28 172.64.203.28 HTTP/2 200 OK content-type: text/css date: Sat, 12 Nov 2022 21:59:49 GMT access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Tue, 30 Aug 2022 16:04:58 GMT etag: W/"e2e288c32f411dc30c0c399302a30654" cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token x-cache: Hit from cloudfront via: 1.1 ce738519b722f3350531751d4205f8f4.cloudfront.net (CloudFront) x-amz-cf-pop: LHR50-P1 x-amz-cf-id: 9oV9VxOmLymWdSiPabPd3BCG4B-JG5VFgCxxVGgKXmicG1K3l3Rrgg== cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8rkB5%2FYB7r%2BH8REG1w%2BnZk3PQQ2VZlVE2Ir%2BTD0OdKPIbPUUvXV6Psncbp%2B44DP%2FIISTbzB8ScWFxNuM2eczJcvspqqDDEcNVN7qzFtllbTrF%2BgicbYT52CR1iq%2BgyC8xDDTfygRNA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 769289794ce688a9-LHR content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---
GET /json/ HTTP/1.1 Host: ipapi.co User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Referer: https://fbcaseid.1005610265198415620.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: ipapi.co/json/ FQDN: ipapi.co IP: 104.26.8.44 104.26.8.44 HTTP/2 200 OK content-type: application/json date: Sat, 12 Nov 2022 21:59:50 GMT allow: OPTIONS, POST, OPTIONS, HEAD, GET x-frame-options: DENY vary: Host, Origin access-control-allow-origin: https://fbcaseid.1005610265198415620.com x-content-type-options: nosniff referrer-policy: same-origin cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EqQdB3JB8dEj9NpkbeQdStmZmXe4w1p%2BvR1lfMXM3BvPKQaj9jHF7XEGJ6lkWTsUanyaeYZNbq2xFSgspMTueGmCOT1mevi2ryU6pL%2FTgeOHe2wuTtKreTyV"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 76928979fa2eb500-OSL content-encoding: br X-Firefox-Spdy: h2 --- Additional Info ---
GET /?fbclid=10058620984209812085 HTTP/1.1 Host: fbcaseid.1005610265198415620.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: fbcaseid.1005610265198415620.com/?fbclid=10058620984209 (...) FQDN: fbcaseid.1005610265198415620.com IP: 172.67.182.224 172.67.182.224 HTTP/2 503 Service Unavailable content-type: text/html; charset=UTF-8 date: Sat, 12 Nov 2022 21:59:48 GMT x-frame-options: SAMEORIGIN cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin referrer-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bGo7Pdeb1jARIRvcnLuVrwq2S1nkU1iYRe7aSleSLHV%2FCl%2BkWd2uwpIbSw9ohpJtyF92%2Blb%2B9CynefzQYRdpkTgo9m%2FpmHr3B%2Bw45SD3E%2F5uWdxG5sDStxJqL8USKQdb2vJ7%2BzVUAucSNRkoRQ0aKnuwfw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7692896d8a001c02-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - quad9: Sinkholed
GET /cdn-cgi/styles/challenges.css HTTP/1.1 Host: fbcaseid.1005610265198415620.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://fbcaseid.1005610265198415620.com/?fbclid=10058620984209812085 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: fbcaseid.1005610265198415620.com/cdn-cgi/styles/challen (...) FQDN: fbcaseid.1005610265198415620.com IP: 172.67.182.224 172.67.182.224 HTTP/2 200 OK content-type: text/css date: Sat, 12 Nov 2022 21:59:48 GMT last-modified: Wed, 09 Nov 2022 12:51:41 GMT etag: W/"636ba25d-1896" server: cloudflare cf-ray: 7692896edb1e1c02-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Sat, 12 Nov 2022 23:59:48 GMT cache-control: max-age=7200, public content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - quad9: Sinkholed
GET /83fd8385f7.js HTTP/1.1 Host: kit.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Referer: https://fbcaseid.1005610265198415620.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: kit.fontawesome.com/83fd8385f7.js FQDN: kit.fontawesome.com IP: 104.18.22.52 104.18.22.52 HTTP/2 200 OK content-type: text/javascript date: Sat, 12 Nov 2022 21:59:49 GMT access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-max-age: 3000 cache-control: max-age=60, public, must-revalidate strict-transport-security: max-age=31536000; preload vary: origin, accept-encoding, access-control-request-headers, access-control-request-method x-request-id: Fyb1RUVwM9KAB0tst9Ph cf-cache-status: MISS server: cloudflare cf-ray: 769289774f70b517-OSL content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /releases/v6.2.0/css/free-v4-font-face.min.css?token=83fd8385f7 HTTP/1.1 Host: ka-f.fontawesome.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://fbcaseid.1005610265198415620.com/ Origin: https://fbcaseid.1005610265198415620.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: ka-f.fontawesome.com/releases/v6.2.0/css/free-v4-font-f (...) FQDN: ka-f.fontawesome.com IP: 172.64.203.28 172.64.203.28 HTTP/2 200 OK content-type: text/css date: Sat, 12 Nov 2022 21:59:49 GMT access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 last-modified: Tue, 30 Aug 2022 16:04:58 GMT etag: W/"a0adfe3c7bd1fa905b7f3b5ecea27889" cache-control: max-age=31556926 access-control-allow-headers: fa-kit-token vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 f73d71dfa047571774d2c0460e5108ec.cloudfront.net (CloudFront) x-amz-cf-pop: LHR50-P1 x-amz-cf-id: betSiwtb0vGR0fkGAUkkZXeASlOoSsGXL8Ym8jjgvK8Sw64VnZ8knw== age: 175939 cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cFlpRtkA4jRaGKo2miAtzNgv3%2FVQ73QaPKas90QwiWjhHbjAKykzQ3sg0UkVDyBfD7ioiUo2mNRk4Al4wh5h2ia9WwIjQElQdpo1Ifws%2Be4K5hzC4EtaLgkMWwRM6N0%2FLK2ILpsmQA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 769289795cee88a9-LHR content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: caseid100523456345345345.firebaseapp.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         199.36.158.100

                                        
                                            HTTP/1.1 301 Moved Permanently

                                        

                                        
                                            
Connection: close 

                                        
                                            
Content-Length: 0 

                                        
                                            
Server: Varnish 

                                        
                                            
Retry-After: 0 

                                        
                                            
Location: https://caseid100523456345345345.firebaseapp.com/ 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:47 GMT 

                                        
                                            
X-Served-By: cache-bma1648-BMA 

                                        
                                            
X-Cache: HIT 

                                        
                                            
X-Cache-Hits: 0 

                                        
                                            
X-Timer: S1668290387.371711,VS0,VE0 

                                        
                                            
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02" 

                                        
                                            
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=10490 

                                        
                                            
Expires: Sun, 13 Nov 2022 00:54:37 GMT 

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:47 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a8391107bfc5e4673e8a706f90f63768

                                                Sha1:   5295ed0b1cb8bad4d3e851049acc7f0270937d12

                                                Sha256: ed5c27510100ffc4481be474ebcb020d147c645beb110604d5284eeeb8b97c02

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: v/qrMPkaEsNqX5baoY3Wq1Mo2n7ovXUoyEt1RXsIteXIMOxb1ApEv5fzZCQnG05icQtvpxGvzHM= 

                                        
                                            
x-amz-request-id: 17PTNYMAF625R1Z0 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sat, 12 Nov 2022 21:13:08 GMT 

                                        
                                            
age: 2799 

                                        
                                            
last-modified: Fri, 30 Sep 2022 18:50:55 GMT 

                                        
                                            
etag: "67d5a988edcda47bc3b3b3f65d32b4b6" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    67d5a988edcda47bc3b3b3f65d32b4b6

                                                Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f

                                                Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: caseid100523456345345345.firebaseapp.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         199.36.158.100

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
cache-control: max-age=3600 

                                        
                                            
content-encoding: br 

                                        
                                            
etag: "fe13cb58b15a5fc6da884e183b6e0333314e7b1b0b29fe8a5539c92108480488-br" 

                                        
                                            
last-modified: Fri, 11 Nov 2022 18:02:51 GMT 

                                        
                                            
strict-transport-security: max-age=31556926; includeSubDomains; preload 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Sat, 12 Nov 2022 21:59:47 GMT 

                                        
                                            
x-served-by: cache-bma1660-BMA 

                                        
                                            
x-cache: MISS 

                                        
                                            
x-cache-hits: 0 

                                        
                                            
x-timer: S1668290388.608373,VS0,VE51 

                                        
                                            
vary: x-fh-requested-host, accept-encoding 

                                        
                                            
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 

                                        
                                            
content-length: 131 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   131

                                                Md5:    d1b9e1845f07b6973e3d0203321a5f5c

                                                Sha1:   31d461aa15525c74b6e64882c92fdba3f9476b64

                                                Sha256: 20fde889bce41c5b7e5765817dce68f8c2be4bd5febd7a49b312706847e0825a

                                        
                                            POST /s/gts1d4int/xv7Q07ZM-NY HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.35

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:47 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: scaffolding on HTTPServer2 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    4058e34f09b70cd844f184232cf9eae4

                                                Sha1:   2cb0338f67b7a89df5137163dcc11d856e06e21b

                                                Sha256: 24650980ae365953191aee977ca99fac00d5bbceb8550beb83fd5c0df0ad044c

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sat, 12 Nov 2022 21:25:00 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 2088 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 2775 

                                        
                                            
Cache-Control: max-age=129199 

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:48 GMT 

                                        
                                            
Etag: "636f622c-1d7" 

                                        
                                            
Expires: Mon, 14 Nov 2022 09:53:07 GMT 

                                        
                                            
Last-Modified: Sat, 12 Nov 2022 09:06:52 GMT 

                                        
                                            
Server: ECS (ska/F70A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    ae51f1958554de4457c22a7d5a9ba8b6

                                                Sha1:   173e90a8c6ee36b7ec569dbea47436a90d7e7c76

                                                Sha256: dc43a04e1e26243f63a8e628f2ebcb23a9527fd4bc40dc6d1d61879b0f95bb21

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: x5umwd2Ue/1K0RBoDNzVOg== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         34.218.168.248

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: /lPCIKv6iFWNPDEkHe6afJFkls4= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 

                                        
                                            
Host: ajax.googleapis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://fbcaseid.1005610265198415620.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.207.202

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript; charset=UTF-8

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-encoding: gzip 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" 

                                        
                                            
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
content-length: 31017 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Sat, 12 Nov 2022 20:49:28 GMT 

                                        
                                            
expires: Sun, 12 Nov 2023 20:49:28 GMT 

                                        
                                            
cache-control: public, max-age=31536000, stale-while-revalidate=2592000 

                                        
                                            
last-modified: Wed, 10 Mar 2021 14:28:09 GMT 

                                        
                                            
age: 4221 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65447)

                                                Size:   31017

                                                Md5:    7808e0e4b7a714230373852158500533

                                                Sha1:   4a79d18722a68a2f38d52e2d3a11b550bdd30b3c

                                                Sha256: 8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 

                                        
                                            
Host: ocsp.globalsign.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.21.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:49 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Etag: "61550B89F284FE032EF24939753DFAA8B7746214" 

                                        
                                            
Expires: Sun, 13 Nov 2022 08:00:00 GMT 

                                        
                                            
Last-Modified: Sat, 12 Nov 2022 20:00:00 UTC 

                                        
                                            
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 2342 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 76928977ba66b50b-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   1462

                                                Md5:    69b6fbfcc7d7f85302467aa1ec9286fb

                                                Sha1:   f10ecf55c78d371ed379cd254b869ac25fcc96f0

                                                Sha256: c56f055ae74eabbd93da9a259bd1a20b2132be192e673c82e9b5c26fc7b03eea

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5583 

                                        
                                            
Cache-Control: max-age=150033 

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:49 GMT 

                                        
                                            
Etag: "636fa897-118" 

                                        
                                            
Expires: Mon, 14 Nov 2022 15:40:22 GMT 

                                        
                                            
Last-Modified: Sat, 12 Nov 2022 14:07:19 GMT 

                                        
                                            
Server: ECS (ska/F70A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 280 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   280

                                                Md5:    6ce8d18e959322d5c3934bcbc4f95edc

                                                Sha1:   f0e6ac15ccb3040a8d9852195c64cea7dbeeb04c

                                                Sha256: 1e73985b43d60823ae979e6d957df2b26c7f2b7e9dadb6579e002cad43ff9f33

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF" 

                                        
                                            
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=3459 

                                        
                                            
Expires: Sat, 12 Nov 2022 22:57:28 GMT 

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:49 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    fb29db48daab83bcaed56b72093619cc

                                                Sha1:   e0e0a09d729ffb1c41411419768896f1e1eb3346

                                                Sha256: 08e24124f809f1ab7e6960355efcb419e13dd5fb6063c31caf04e11ebdb7a5cf

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80441337-327d-4d34-9fe8-53269c39ac18.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7867 

                                        
                                            
x-amzn-requestid: e05d4978-6f46-4395-8121-4d969a222328 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bgfLqFWIoAMF01A= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6370124a-4033150d0180e56e2965e26e;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 12 Nov 2022 21:38:18 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: YDkJ7OIcS3FiDPufRTj5VtL5CMxbNN2o2Zq50QQ9UNeDw4uE4j3jrw== 

                                        
                                            
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 12 Nov 2022 21:54:29 GMT 

                                        
                                            
age: 321 

                                        
                                            
etag: "a9922959c532dd26f21bda4f74ee1fa8496e862e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7867

                                                Md5:    26249508ef18eac51cf62cf6e90339a4

                                                Sha1:   a9922959c532dd26f21bda4f74ee1fa8496e862e

                                                Sha256: 25075ef6337bae8e60412cdca98afbae6aca61d889aadce4cbad4a8522f4c4b1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a09e7de-c2b9-4cf4-a032-cdce1be83c46.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7394 

                                        
                                            
x-amzn-requestid: 78860ce6-f1ce-40a6-a901-3630dcdd6c3b 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bekDRHb6oAMFU_A= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-636f4d47-1534ce03076a581f5721b4ba;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 12 Nov 2022 07:37:43 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: s7Qs5JcCh9H0SevsGfU4qw5PrtDxFPsa5o6HPXIuHHY7NzYcn8guAg== 

                                        
                                            
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 12 Nov 2022 21:54:29 GMT 

                                        
                                            
age: 321 

                                        
                                            
etag: "32b8ed02d309d66ac642683470d5f799e22afeaf" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7394

                                                Md5:    bed1df7954a5380cf2c090a4a20e3035

                                                Sha1:   32b8ed02d309d66ac642683470d5f799e22afeaf

                                                Sha256: 7a4b252d81b5ee8a8904aeb572110e78d5ecc3e80c11ead3158d863784bcbff1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff186777a-5327-41b7-9918-a7c7b298fdaf.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 2753 

                                        
                                            
x-amzn-requestid: 4564ab0e-5b18-4958-983e-e847272f3ed4 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bes3HECWoAMFcPw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-636f5b60-2b9a73bd648cf08c3d851799;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 12 Nov 2022 08:37:52 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: Ua0TzVb8Q4i_4sIgvNYbYEF37AkzvvOM4rk_D8_RIfSWrKEXMq7rkQ== 

                                        
                                            
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 12 Nov 2022 21:54:29 GMT 

                                        
                                            
age: 13417 

                                        
                                            
etag: "92a599f4dd1df4a38cca5e095790f787f442d2a2" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   2753

                                                Md5:    c6caf0847d9e16ba6710405aadf02f01

                                                Sha1:   92a599f4dd1df4a38cca5e095790f787f442d2a2

                                                Sha256: b42dba826012a7c62aeb1869e53b896b47aaca8a278952771560a2234b45563a

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5584 

                                        
                                            
Cache-Control: max-age=150033 

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:50 GMT 

                                        
                                            
Etag: "636fa897-118" 

                                        
                                            
Expires: Mon, 14 Nov 2022 15:40:23 GMT 

                                        
                                            
Last-Modified: Sat, 12 Nov 2022 14:07:19 GMT 

                                        
                                            
Server: ECS (ska/F70A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 280 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   280

                                                Md5:    6ce8d18e959322d5c3934bcbc4f95edc

                                                Sha1:   f0e6ac15ccb3040a8d9852195c64cea7dbeeb04c

                                                Sha256: 1e73985b43d60823ae979e6d957df2b26c7f2b7e9dadb6579e002cad43ff9f33

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sectigo.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         172.64.155.188

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 12 Nov 2022 21:59:50 GMT 

                                        
                                            
Content-Length: 472 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 09 Nov 2022 21:46:12 GMT 

                                        
                                            
Expires: Wed, 16 Nov 2022 21:46:11 GMT 

                                        
                                            
Etag: "b4cd2db52e46d12d3cd8754639f3ebca8a10c124" 

                                        
                                            
Cache-Control: max-age=344180,s-maxage=1800,public,no-transform,must-revalidate 

                                        
                                            
X-CCACDN-Proxy-ID: mcdpinlb3 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
CF-Cache-Status: DYNAMIC 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 7692897b2abd0b55-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   16940

                                                Md5:    0c6b8a5967c06d7f1be7bf4617e690d1

                                                Sha1:   d4d74f4ca506e9b5e2c34aff124329f0da87f10b

                                                Sha256: 0af3e490ad1e4b1b87adcf78665d83649e9c31c6be3b1bc0b4618c15785d0fe5

                                        
                                            GET /releases/v6.2.0/webfonts/free-fa-solid-900.woff2 HTTP/1.1 

                                        
                                            
Host: ka-f.fontawesome.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: identity 

                                        
                                            
Origin: https://fbcaseid.1005610265198415620.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://fbcaseid.1005610265198415620.com/ 

                                        
                                            
Sec-Fetch-Dest: font 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         172.64.203.28

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: font/woff2

                                        

                                        
                                            
date: Sat, 12 Nov 2022 21:59:50 GMT 

                                        
                                            
content-length: 150456 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-methods: GET 

                                        
                                            
access-control-max-age: 3000 

                                        
                                            
last-modified: Tue, 30 Aug 2022 16:15:00 GMT 

                                        
                                            
etag: "822fa3f2f51f169c970f713b88158737" 

                                        
                                            
cache-control: max-age=31556926 

                                        
                                            
access-control-allow-headers: fa-kit-token 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 da882a3066261fe68bc0e26348bba540.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: JFK50-P8 

                                        
                                            
x-amz-cf-id: L6u-jTZbRnE9WAHr2R3U9PSBowocPlXDxJnO4OlUW6_2DB2QBP41OQ== 

                                        
                                            
cf-cache-status: MISS 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lDKt4MXf7InTIQ69pWXjSPsLgqB3YXDO8%2BmZJcXtGer1VRziGGiZutwvZRFmELqGLcZoMo1DjklsKTWDTtZcT02DMYYwTNRWe7s316rdT8DT3fHLZvtPFCkkvQxbO2RrNSOCDRPW4g%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 76928979ddea88a9-LHR 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Web Open Font Format (Version 2), TrueType, length 150456, version 770.256\012- data

                                                Size:   150456

                                                Md5:    822fa3f2f51f169c970f713b88158737

                                                Sha1:   74b5ddde927a0f84883fed55a65ffbb6ada11761

                                                Sha256: ad28ece0bf48b1488c82aaf700201d7f6b56a62e11b5b6a0a12481780c8a3417

                                        
                                            GET /releases/v6.2.0/css/free-v5-font-face.min.css?token=83fd8385f7 HTTP/1.1 

                                        
                                            
Host: ka-f.fontawesome.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://fbcaseid.1005610265198415620.com/ 

                                        
                                            
Origin: https://fbcaseid.1005610265198415620.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         172.64.203.28

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
date: Sat, 12 Nov 2022 21:59:49 GMT 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-methods: GET 

                                        
                                            
access-control-max-age: 3000 

                                        
                                            
last-modified: Tue, 30 Aug 2022 16:04:58 GMT 

                                        
                                            
etag: W/"e2e288c32f411dc30c0c399302a30654" 

                                        
                                            
cache-control: max-age=31556926 

                                        
                                            
access-control-allow-headers: fa-kit-token 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 ce738519b722f3350531751d4205f8f4.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: LHR50-P1 

                                        
                                            
x-amz-cf-id: 9oV9VxOmLymWdSiPabPd3BCG4B-JG5VFgCxxVGgKXmicG1K3l3Rrgg== 

                                        
                                            
cf-cache-status: MISS 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8rkB5%2FYB7r%2BH8REG1w%2BnZk3PQQ2VZlVE2Ir%2BTD0OdKPIbPUUvXV6Psncbp%2B44DP%2FIISTbzB8ScWFxNuM2eczJcvspqqDDEcNVN7qzFtllbTrF%2BgicbYT52CR1iq%2BgyC8xDDTfygRNA%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 769289794ce688a9-LHR 

                                        
                                            
content-encoding: br 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /83fd8385f7.js HTTP/1.1 

                                        
                                            
Host: kit.fontawesome.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://fbcaseid.1005610265198415620.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://fbcaseid.1005610265198415620.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         104.18.22.52

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript

                                        

                                        
                                            
date: Sat, 12 Nov 2022 21:59:49 GMT 

                                        
                                            
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token 

                                        
                                            
access-control-allow-methods: GET, OPTIONS 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-max-age: 3000 

                                        
                                            
cache-control: max-age=60, public, must-revalidate 

                                        
                                            
strict-transport-security: max-age=31536000; preload 

                                        
                                            
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method 

                                        
                                            
x-request-id: Fyb1RUVwM9KAB0tst9Ph 

                                        
                                            
cf-cache-status: MISS 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 769289774f70b517-OSL 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	caseid100523456345345345.firebaseapp.com/
IP	199.36.158.100 (United States)
ASN	#54113 FASTLY
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-12 21:59:58 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	5
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (19)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.36.158.100

Last 5 reports on ASN: FASTLY

Last 1 reports on domain: caseid100523456345345345.firebaseapp.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (1)

#1 JavaScript::Eval (size: 553) - SHA256: da776f47a7c7d494f7acd0b4fbfecb04fd203d437179e0a84c5a1c7f8582675a

Executed Writes (0)

HTTP Transactions (44)

Overview

Domain Summary (19)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.36.158.100

Last 5 reports on ASN: FASTLY

Last 1 reports on domain: caseid100523456345345345.firebaseapp.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (1)

#1 JavaScript::Eval (size: 553) - SHA256: da776f47a7c7d494f7acd0b4fbfecb04fd203d437179e0a84c5a1c7f8582675a

Executed Writes (0)

HTTP Transactions (44)

Network Intrusion Detection Systems