urlquery - report: puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C151645172991f1477dbd26917ef3822423f62e984a91f1477dbd26917ef3822423f62e984a91f1477dbd

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
aadcdn.msauth.net (3)	1421	No data	No data	13.107.246.53
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-12-01 17:14:08 UTC	34.102.187.140
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-12-01 17:12:49 UTC	34.117.237.239
puthirnews.lk (6)	0	2022-06-18 07:18:41 UTC	2022-12-01 22:15:31 UTC	154.12.253.96	Unknown ranking
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	34.216.88.5
img-getpocket.cdn.mozilla.net (7)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
r3.o.lencr.org (5)	344	No data	No data	95.101.11.115

Scan Date	Severity	Indicator	Comment
2022-12-01	2	puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C15164517 (...)	Generic/Spear Phishing

Scan Date	Severity	Indicator	Comment
2022-12-02	2	puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C15164517 (...)	Phishing
2022-12-02	2	puthirnews.lk/Inv/grave/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	Phishing
2022-12-02	2	puthirnews.lk/Inv/grave/ellipsis_white_5ac590ee72bfe06a7cecfd75b588ad73.svg	Phishing
2022-12-02	2	puthirnews.lk/Inv/grave/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg	Phishing

Date	UQ / IDS / BL	URL	IP
2023-01-29 20:41:31 +0000	0 - 0 - 3	s2hghdlg.3rgroup.lk/	154.12.253.96
2022-12-02 01:12:52 +0000	6 - 0 - 5	puthirnews.lk/Inv/login.php?hdhd92820df8angf2 (...)	154.12.253.96
2022-11-10 23:53:16 +0000	0 - 0 - 2	www.freedownloadhdmovies.com/wp-admin/bt/BTne (...)	154.12.253.96
2022-11-10 14:43:42 +0000	0 - 0 - 2	www.freedownloadhdmovies.com/wp-admin/bt/BTne (...)	154.12.253.96

Date	UQ / IDS / BL	URL	IP
2023-01-30 04:46:05 +0000	0 - 0 - 1	style.healthystyleoflife.com/ga/click/2-45761 (...)	149.102.137.222
2023-01-30 04:44:46 +0000	0 - 0 - 1	style.healthystyleoflife.com/ga/click/2-45761 (...)	149.102.137.222
2023-01-30 02:50:28 +0000	0 - 0 - 1	rulesfb-p6dy1vzb.cha-international.com/	38.111.46.34
2023-01-30 02:43:54 +0000	0 - 1 - 1	www.aopliiy.shop/	154.38.167.73
2023-01-30 01:33:29 +0000	0 - 1 - 8	www.aiyouqu.net/Category_50/Index.html	38.49.24.230

Date	UQ / IDS / BL	URL	IP
2022-12-02 01:12:52 +0000	6 - 0 - 5	puthirnews.lk/Inv/login.php?hdhd92820df8angf2 (...)	154.12.253.96

Date	UQ / IDS / BL	URL	IP
2023-01-29 02:43:55 +0000	6 - 0 - 5	sparksforestadventure.com/kdk/Bxnndj/boxxx/lo (...)	192.185.39.245
2023-01-28 11:13:42 +0000	6 - 0 - 5	sparksforestadventure.com/kdk/Bxnndj/boxxx/lo (...)	192.185.39.245
2023-01-26 02:53:27 +0000	6 - 0 - 5	sparksforestadventure.com/kdk/Bxnndj/boxxx/lo (...)	192.185.39.245
2023-01-25 16:48:45 +0000	6 - 0 - 5	sparksforestadventure.com/kdk/Bxnndj/boxxx/lo (...)	192.185.39.245
2022-12-08 00:30:45 +0000	6 - 0 - 0	sproy.in/ewBHGwrsfv/8aa496661d5efbba962063da0 (...)	162.241.126.53

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6672 Expires: Fri, 02 Dec 2022 03:03:52 GMT Date: Fri, 02 Dec 2022 01:12:40 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3bbb845b153026fc5332dd4506585b57 Sha1: 3cad200fac28fd00f34ce6ef79373e661e188743 Sha256: 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3040 Cache-Control: max-age=122952 Date: Fri, 02 Dec 2022 01:12:40 GMT Etag: "63888270-1d7" Expires: Sat, 03 Dec 2022 11:21:52 GMT Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT Server: ECS (ska/F6FE) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 0c748388899e8a8d3680355da2ea5020 Sha1: 903c620cd137613daafb0da0508c37b2f4a67212 Sha256: 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4540 Expires: Fri, 02 Dec 2022 02:28:20 GMT Date: Fri, 02 Dec 2022 01:12:40 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 55b4c61a1e99001307750e3647fe1102 Sha1: 7559f9f6770b7d3f45b723167062096312641e08 Sha256: 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 02 Dec 2022 00:18:10 GMT cache-control: public,max-age=3600 age: 3270 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 30db107dcf4380cef05efea409c2e6a3 Sha1: 96e6a306fbc07299aba64e5c14e2bfca35872fa9 Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: LHU10CsI3IXz5wD3uvZuxmjUFT2U4C3hOcISn1PkBAbyO74whSdZPPyi50BPILSTAcC6Kw3Bi68= x-amz-request-id: KJPBNJFTN54KE2DP content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 02 Dec 2022 00:46:30 GMT age: 1570 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 02 Dec 2022 01:12:40 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C151645172991f1477dbd26917ef3822423f62e984a91f1477dbd26917ef3822423f62e984a91f1477dbd HTTP/1.1 Host: puthirnews.lk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd (...) FQDN: puthirnews.lk IP: 154.12.253.96 HASH: 27a160204e3017da54eebf6e83c3eb3e345836dc33f1731fafbd707145f67906 154.12.253.96 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Connection: Keep-Alive Set-Cookie: PHPSESSID=11ee0418a7726c1432e9b0e83c6703dc; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 6517 Content-Encoding: gzip Vary: Accept-Encoding Date: Fri, 02 Dec 2022 01:12:40 GMT --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (491) Size: 6517 Md5: a6e67097e6dd89c878c27dbceedee125 Sha1: 433c75634cf266eed93c30da89551b8d79e210b2 Sha256: 27a160204e3017da54eebf6e83c3eb3e345836dc33f1731fafbd707145f67906 Alerts: Blocklists: - openphish: Generic/Spear Phishing - fortinet: Phishing
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 02 Dec 2022 01:11:15 GMT cache-control: public,max-age=3600 age: 86 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3038 Cache-Control: max-age=117886 Date: Fri, 02 Dec 2022 01:12:41 GMT Etag: "63886ea9-1d7" Expires: Sat, 03 Dec 2022 09:57:27 GMT Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT Server: ECS (ska/F6FE) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 1f88399f3fdd89dbb9ca1229cb67143a Sha1: 325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3 Sha256: 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ia88a1prlwdqyj0b-dw4zw2.css HTTP/1.1 Host: aadcdn.msauth.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://puthirnews.lk Connection: keep-alive Referer: http://puthirnews.lk/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged (...) FQDN: aadcdn.msauth.net IP: 13.107.246.53 HASH: f9fb61f99f131062057b26f45fe2573386ac066ebd1b422a0211454d169ee379 13.107.246.53 HTTP/2 200 OK content-type: text/css cache-control: public, max-age=31536000 content-length: 18743 content-encoding: gzip content-md5: sh+WcSBilpQeE1SmF0PW6w== last-modified: Wed, 13 Mar 2019 06:30:55 GMT etag: 0x8D6A77D72E37AB9 x-cache: TCP_HIT server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 059a3de7-101e-0036-1782-05ec6e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 0CVGJYwAAAADLFbPicOQhSJfchTjDFarDQU1TMDRFREdFMTgxNQAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY= date: Fri, 02 Dec 2022 01:12:41 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (61177) Size: 18743 Md5: b21f9671206296941e1354a61743d6eb Sha1: 78a492165603878204e5c940d9db8d0c3abc49f8 Sha256: f9fb61f99f131062057b26f45fe2573386ac066ebd1b422a0211454d169ee379
GET /ests/2.1/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://puthirnews.lk/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: aadcdn.msauth.net/ests/2.1/content/images/arrow_left_a9 (...) FQDN: aadcdn.msauth.net IP: 13.107.246.53 HASH: 1707be1284617acc0a66a14448207214d55c3da4aaf25854e137e138e089257e 13.107.246.53 HTTP/2 200 OK content-type: image/svg+xml cache-control: public, max-age=604800 content-length: 276 content-encoding: gzip content-md5: TjUQkZ0p0Y7rbj6LJofS9Q== last-modified: Fri, 02 Nov 2018 20:25:09 GMT etag: 0x8D64101494758DF x-cache: TCP_HIT server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 7111a487-401e-0043-0e4b-059964000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 0CVGJYwAAAAD9f8OK5giaSpwuaeVMzKMTQU1TMDRFREdFMTgxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY= date: Fri, 02 Dec 2022 01:12:41 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (513), with no line terminators Size: 276 Md5: 4e3510919d29d18eeb6e3e8b2687d2f5 Sha1: 31522a9ec576a462c3f1ffa65c010d4eb77e9a85 Sha256: 1707be1284617acc0a66a14448207214d55c3da4aaf25854e137e138e089257e
GET /Inv/grave/37_533e293f0c8947ada653b47c00e394e2.png HTTP/1.1 Host: puthirnews.lk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C151645172991f1477dbd26917ef3822423f62e984a91f1477dbd26917ef3822423f62e984a91f1477dbd Cookie: PHPSESSID=11ee0418a7726c1432e9b0e83c6703dc	URL: puthirnews.lk/Inv/grave/37_533e293f0c8947ada653b47c00e3 (...) FQDN: puthirnews.lk IP: 154.12.253.96 HASH: b5d587f6c48a9b22bbe97150249e0c0655ac1780bd273431480a22f8a5bfef6c 154.12.253.96 HTTP/1.1 200 OK Content-Type: image/png Connection: Keep-Alive Cache-Control: public, max-age=604800 Expires: Fri, 09 Dec 2022 01:12:41 GMT Last-Modified: Sun, 07 Apr 2019 10:59:34 GMT Accept-Ranges: bytes Content-Length: 1750 Date: Fri, 02 Dec 2022 01:12:41 GMT --- Additional Info --- Magic: PNG image data, 342 x 72, 4-bit colormap, non-interlaced\012- data Size: 1750 Md5: 533e293f0c8947ada653b47c00e394e2 Sha1: 0f507bb89c42f937a290d0eeda3f2e0dbfcad5c1 Sha256: b5d587f6c48a9b22bbe97150249e0c0655ac1780bd273431480a22f8a5bfef6c Alerts: urlquery: - Phishing - Microsoft
GET /Inv/grave/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: puthirnews.lk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C151645172991f1477dbd26917ef3822423f62e984a91f1477dbd26917ef3822423f62e984a91f1477dbd Cookie: PHPSESSID=11ee0418a7726c1432e9b0e83c6703dc	URL: puthirnews.lk/Inv/grave/microsoft_logo_ee5c8d9fb6248c93 (...) FQDN: puthirnews.lk IP: 154.12.253.96 HASH: e2fb2f72979701fbb03c92d19f70d4261caa025d3a34ededd66ebd2f3d8812e9 154.12.253.96 HTTP/1.1 200 OK Content-Type: image/svg+xml Connection: Keep-Alive Cache-Control: public, max-age=604800 Expires: Fri, 09 Dec 2022 01:12:41 GMT Last-Modified: Sun, 07 Apr 2019 10:59:34 GMT Accept-Ranges: bytes Content-Encoding: gzip Vary: Accept-Encoding Content-Length: 1395 Date: Fri, 02 Dec 2022 01:12:41 GMT --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators Size: 1395 Md5: 825c772868509f88f83037d4b7f851cd Sha1: 9a76cc371b0f3618fd875d70b46ee29362ea01f7 Sha256: e2fb2f72979701fbb03c92d19f70d4261caa025d3a34ededd66ebd2f3d8812e9 Alerts: urlquery: - Phishing - Microsoft Blocklists: - fortinet: Phishing
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: Nj106CF0qg/WAt1tbGLYIQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 34.216.88.5 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 34.216.88.5 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: yjcfHNUNffo217fxrv5Tj2SR/9U= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Inv/grave/ellipsis_white_5ac590ee72bfe06a7cecfd75b588ad73.svg HTTP/1.1 Host: puthirnews.lk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C151645172991f1477dbd26917ef3822423f62e984a91f1477dbd26917ef3822423f62e984a91f1477dbd Cookie: PHPSESSID=11ee0418a7726c1432e9b0e83c6703dc	URL: puthirnews.lk/Inv/grave/ellipsis_white_5ac590ee72bfe06a (...) FQDN: puthirnews.lk IP: 154.12.253.96 HASH: 9de2224dae8d67d545d104d77a680ead03752804ce207f5e69af3a5e4cf742bb 154.12.253.96 HTTP/1.1 200 OK Content-Type: image/svg+xml Connection: Keep-Alive Cache-Control: public, max-age=604800 Expires: Fri, 09 Dec 2022 01:12:41 GMT Last-Modified: Sun, 07 Apr 2019 10:59:34 GMT Accept-Ranges: bytes Content-Encoding: gzip Vary: Accept-Encoding Content-Length: 264 Date: Fri, 02 Dec 2022 01:12:41 GMT --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (915), with no line terminators Size: 264 Md5: a62e0913d800b52e8faf5dfbea076a65 Sha1: 011cd47188b19ab8f6e6f34a4d694a78eed6a4c9 Sha256: 9de2224dae8d67d545d104d77a680ead03752804ce207f5e69af3a5e4cf742bb Alerts: urlquery: - Phishing - Microsoft Blocklists: - fortinet: Phishing
GET /Inv/grave/ellipsis_grey_2b5d393db04a5e6e1f739cb266e65b4c.svg HTTP/1.1 Host: puthirnews.lk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C151645172991f1477dbd26917ef3822423f62e984a91f1477dbd26917ef3822423f62e984a91f1477dbd Cookie: PHPSESSID=11ee0418a7726c1432e9b0e83c6703dc	URL: puthirnews.lk/Inv/grave/ellipsis_grey_2b5d393db04a5e6e1 (...) FQDN: puthirnews.lk IP: 154.12.253.96 HASH: 022ecdb095775cb54efdfe534da439b640b03b03fc71f33021d3ae47d5b43dea 154.12.253.96 HTTP/1.1 200 OK Content-Type: image/svg+xml Connection: Keep-Alive Cache-Control: public, max-age=604800 Expires: Fri, 09 Dec 2022 01:12:41 GMT Last-Modified: Sun, 07 Apr 2019 10:59:34 GMT Accept-Ranges: bytes Content-Encoding: gzip Vary: Accept-Encoding Content-Length: 263 Date: Fri, 02 Dec 2022 01:12:41 GMT --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (915), with no line terminators Size: 263 Md5: 8c12877f946920928a5011a45f5faee5 Sha1: 03ff4039b2dbac514c749f5cae88416f0d4b324b Sha256: 022ecdb095775cb54efdfe534da439b640b03b03fc71f33021d3ae47d5b43dea Alerts: urlquery: - Phishing - Microsoft Blocklists: - fortinet: Phishing
GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://puthirnews.lk/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eup (...) FQDN: aadcdn.msauth.net IP: 13.107.246.53 HASH: 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21 13.107.246.53 HTTP/2 200 OK content-type: image/x-icon cache-control: public, max-age=604800 content-length: 17174 content-md5: EuPayFgGHQiAI7K9SOL6lg== last-modified: Fri, 02 Nov 2018 20:25:25 GMT etag: 0x8D6410152A9D7E1 x-cache: TCP_HIT server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 69fdd638-401e-0017-49c2-05565f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 0CVGJYwAAAAC1sdXqIFqqS65rSZXeIq2uQU1TMDRFREdFMTgxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY= date: Fri, 02 Dec 2022 01:12:41 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data Size: 17174 Md5: 12e3dac858061d088023b2bd48e2fa96 Sha1: e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5 Sha256: 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21
GET /Inv/find/gvfRnh.jpg HTTP/1.1 Host: puthirnews.lk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C151645172991f1477dbd26917ef3822423f62e984a91f1477dbd26917ef3822423f62e984a91f1477dbd Cookie: PHPSESSID=11ee0418a7726c1432e9b0e83c6703dc	URL: puthirnews.lk/Inv/find/gvfRnh.jpg FQDN: puthirnews.lk IP: 154.12.253.96 HASH: 6cf9dada0d0cfd144034f31f050154491436ad59f1eaa7ba128c5f2eec41cc4a 154.12.253.96 HTTP/1.1 200 OK Content-Type: image/jpeg Connection: Keep-Alive Cache-Control: public, max-age=604800 Expires: Fri, 09 Dec 2022 01:12:41 GMT Last-Modified: Sun, 18 Aug 2019 21:49:24 GMT Accept-Ranges: bytes Content-Length: 116389 Date: Fri, 02 Dec 2022 01:12:41 GMT --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=PhotoScape, datetime=2014:10:29 20:27:15], baseline, precision 8, 1920x1064, components 3\012- data Size: 116389 Md5: 129d797a9f7c946883b0d1371b0f3867 Sha1: c001f4d7b1e3cb058cc6b043eb0a206cc716028f Sha256: 6cf9dada0d0cfd144034f31f050154491436ad59f1eaa7ba128c5f2eec41cc4a Alerts: urlquery: - Phishing - Microsoft
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9043 Expires: Fri, 02 Dec 2022 03:43:25 GMT Date: Fri, 02 Dec 2022 01:12:42 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9043 Expires: Fri, 02 Dec 2022 03:43:25 GMT Date: Fri, 02 Dec 2022 01:12:42 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9043 Expires: Fri, 02 Dec 2022 03:43:25 GMT Date: Fri, 02 Dec 2022 01:12:42 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a5598e9-4752-4e3f-9938-977b517ce347.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: de9011e1f05fb2f7a202f5a6e6ed7b77a339c0af8d3409e4fc898f2b8c6963ad 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5967 x-amzn-requestid: 889cb78c-7f00-4bd5-8f58-16aeae59f384 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfGgfFo2IAMF7ig= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891e02-636955ff357675180ee298ff;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:58 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 7R1Dono_VzhL0RPOfUBX2GC13dxG0n0buPmhAPencEFJ7WupYOUK8w== via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 21:50:08 GMT age: 12154 etag: "795fd611123ebde700aaff1f0dac862f9cad00dc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5967 Md5: 4e1372b65928f2addd9d8e44ce63ea0c Sha1: 795fd611123ebde700aaff1f0dac862f9cad00dc Sha256: de9011e1f05fb2f7a202f5a6e6ed7b77a339c0af8d3409e4fc898f2b8c6963ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7334 x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfGeoHJOoAMF75g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: tuKmV_nb4HVbqkhtCnZY3b33VB-bB6UxaBl6HsY_JgWesbUB8SPt-g== via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 22:09:38 GMT age: 10984 etag: "23753fe8af09ec8ffa10eed4d201a71833885c99" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7334 Md5: 498ab4412ed5cf977bc23e4e870894b0 Sha1: 23753fe8af09ec8ffa10eed4d201a71833885c99 Sha256: 036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7591 x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfGgMFRZIAMFl7g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 21:48:51 GMT age: 12231 etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7591 Md5: d147ccb10bda82b153a596c3c967cd6a Sha1: ffd0763f997e71a8c1458523fc17cafe8849dfdf Sha256: 1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6174 x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cZ0iyH2WoAMFQdg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0 x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 07:20:09 GMT age: 64353 etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6174 Md5: b986f9fcbeca91ed5c8d58fbfaf47d19 Sha1: 6e6c8bd2bce144cc4da1cd7be375b046b60dca79 Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11402 x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfGzJHu-IAMFbYA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 21:51:33 GMT age: 12069 etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11402 Md5: 1c80b8025242ddfcc816ec612456b99e Sha1: aa944d10fe4a44b790b01ef62edc0f85a6d558e3 Sha256: a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 2942 x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfGeoGFYoAMFWgA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 21:49:56 GMT age: 12166 etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 2942 Md5: b47431190f34eccf0a6efb98e2a32b7d Sha1: 9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704 Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F356e23df-cb76-452a-b299-da5410086837.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e9087e7fce332289d67d4d5646d0233c2f2d871cc88dc1c51d5ea1e9f2fb5abd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 15495 x-amzn-requestid: 977cdbce-3a9c-4006-a5a1-5c4c82bd4a94 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cfHDIFxzIAMFzEw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63891ee0-4b2cb3a16ca745537a8caf8c;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: KnOx0PJ8BR9OoAzXfuWk_Je_yawqzY4isC0hYTZRvJ74YiVs8jqyIQ== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 22:25:42 GMT age: 10027 etag: "f799dfd89a4f5a452dc837b8616549f578fb4184" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 15495 Md5: 82ea44d6cb116fb1f5752ce9bb87e345 Sha1: f799dfd89a4f5a452dc837b8616549f578fb4184 Sha256: e9087e7fce332289d67d4d5646d0233c2f2d871cc88dc1c51d5ea1e9f2fb5abd

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950" 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=6672 

                                        
                                            
Expires: Fri, 02 Dec 2022 03:03:52 GMT 

                                        
                                            
Date: Fri, 02 Dec 2022 01:12:40 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    3bbb845b153026fc5332dd4506585b57

                                                Sha1:   3cad200fac28fd00f34ce6ef79373e661e188743

                                                Sha256: 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA" 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4540 

                                        
                                            
Expires: Fri, 02 Dec 2022 02:28:20 GMT 

                                        
                                            
Date: Fri, 02 Dec 2022 01:12:40 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    55b4c61a1e99001307750e3647fe1102

                                                Sha1:   7559f9f6770b7d3f45b723167062096312641e08

                                                Sha256: 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: LHU10CsI3IXz5wD3uvZuxmjUFT2U4C3hOcISn1PkBAbyO74whSdZPPyi50BPILSTAcC6Kw3Bi68= 

                                        
                                            
x-amz-request-id: KJPBNJFTN54KE2DP 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Fri, 02 Dec 2022 00:46:30 GMT 

                                        
                                            
age: 1570 

                                        
                                            
last-modified: Thu, 10 Nov 2022 09:21:27 GMT 

                                        
                                            
etag: "9ebddc2b260d081ebbefee47c037cb28" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    9ebddc2b260d081ebbefee47c037cb28

                                                Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39

                                                Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 3038 

                                        
                                            
Cache-Control: max-age=117886 

                                        
                                            
Date: Fri, 02 Dec 2022 01:12:41 GMT 

                                        
                                            
Etag: "63886ea9-1d7" 

                                        
                                            
Expires: Sat, 03 Dec 2022 09:57:27 GMT 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT 

                                        
                                            
Server: ECS (ska/F6FE) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    1f88399f3fdd89dbb9ca1229cb67143a

                                                Sha1:   325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3

                                                Sha256: 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79

                                        
                                            GET /ests/2.1/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 

                                        
                                            
Host: aadcdn.msauth.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://puthirnews.lk/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         13.107.246.53

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/svg+xml

                                        

                                        
                                            
cache-control: public, max-age=604800 

                                        
                                            
content-length: 276 

                                        
                                            
content-encoding: gzip 

                                        
                                            
content-md5: TjUQkZ0p0Y7rbj6LJofS9Q== 

                                        
                                            
last-modified: Fri, 02 Nov 2018 20:25:09 GMT 

                                        
                                            
etag: 0x8D64101494758DF 

                                        
                                            
x-cache: TCP_HIT 

                                        
                                            
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 

                                        
                                            
x-ms-request-id: 7111a487-401e-0043-0e4b-059964000000 

                                        
                                            
x-ms-version: 2009-09-19 

                                        
                                            
x-ms-lease-status: unlocked 

                                        
                                            
x-ms-blob-type: BlockBlob 

                                        
                                            
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
x-azure-ref: 0CVGJYwAAAAD9f8OK5giaSpwuaeVMzKMTQU1TMDRFREdFMTgxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY= 

                                        
                                            
date: Fri, 02 Dec 2022 01:12:41 GMT 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (513), with no line terminators

                                                Size:   276

                                                Md5:    4e3510919d29d18eeb6e3e8b2687d2f5

                                                Sha1:   31522a9ec576a462c3f1ffa65c010d4eb77e9a85

                                                Sha256: 1707be1284617acc0a66a14448207214d55c3da4aaf25854e137e138e089257e

                                        
                                            GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 

                                        
                                            
Host: aadcdn.msauth.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://puthirnews.lk/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         13.107.246.53

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/x-icon

                                        

                                        
                                            
cache-control: public, max-age=604800 

                                        
                                            
content-length: 17174 

                                        
                                            
content-md5: EuPayFgGHQiAI7K9SOL6lg== 

                                        
                                            
last-modified: Fri, 02 Nov 2018 20:25:25 GMT 

                                        
                                            
etag: 0x8D6410152A9D7E1 

                                        
                                            
x-cache: TCP_HIT 

                                        
                                            
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 

                                        
                                            
x-ms-request-id: 69fdd638-401e-0017-49c2-05565f000000 

                                        
                                            
x-ms-version: 2009-09-19 

                                        
                                            
x-ms-lease-status: unlocked 

                                        
                                            
x-ms-blob-type: BlockBlob 

                                        
                                            
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
x-azure-ref: 0CVGJYwAAAAC1sdXqIFqqS65rSZXeIq2uQU1TMDRFREdFMTgxNAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY= 

                                        
                                            
date: Fri, 02 Dec 2022 01:12:41 GMT 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\012- data

                                                Size:   17174

                                                Md5:    12e3dac858061d088023b2bd48e2fa96

                                                Sha1:   e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5

                                                Sha256: 90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9043 

                                        
                                            
Expires: Fri, 02 Dec 2022 03:43:25 GMT 

                                        
                                            
Date: Fri, 02 Dec 2022 01:12:42 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    ecab83d593cc540b02689be5be7abc8a

                                                Sha1:   81cda579b7b9b22332b85266b0126585f3d3f73f

                                                Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" 

                                        
                                            
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9043 

                                        
                                            
Expires: Fri, 02 Dec 2022 03:43:25 GMT 

                                        
                                            
Date: Fri, 02 Dec 2022 01:12:42 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    ecab83d593cc540b02689be5be7abc8a

                                                Sha1:   81cda579b7b9b22332b85266b0126585f3d3f73f

                                                Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7334 

                                        
                                            
x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cfGeoHJOoAMF75g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: tuKmV_nb4HVbqkhtCnZY3b33VB-bB6UxaBl6HsY_JgWesbUB8SPt-g== 

                                        
                                            
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 01 Dec 2022 22:09:38 GMT 

                                        
                                            
age: 10984 

                                        
                                            
etag: "23753fe8af09ec8ffa10eed4d201a71833885c99" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7334

                                                Md5:    498ab4412ed5cf977bc23e4e870894b0

                                                Sha1:   23753fe8af09ec8ffa10eed4d201a71833885c99

                                                Sha256: 036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6174 

                                        
                                            
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cZ0iyH2WoAMFQdg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg== 

                                        
                                            
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 01 Dec 2022 07:20:09 GMT 

                                        
                                            
age: 64353 

                                        
                                            
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6174

                                                Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19

                                                Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79

                                                Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 2942 

                                        
                                            
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cfGeoGFYoAMFWgA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g== 

                                        
                                            
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 01 Dec 2022 21:49:56 GMT 

                                        
                                            
age: 12166 

                                        
                                            
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   2942

                                                Md5:    b47431190f34eccf0a6efb98e2a32b7d

                                                Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704

                                                Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2

URL	puthirnews.lk/Inv/login.php?hdhd92820df8angf264s9df23sd2f1n495K3L2C151645172991f1477dbd26917ef3822423f62e984a91f1477dbd26917ef3822423f62e984a91f1477dbd
IP	154.12.253.96 (United States)
ASN	#174 COGENT-174
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-12-02 01:12:52 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	5
urlquery alerts	6 Phishing - Microsoft
Tags	None

Overview

Domain Summary (9)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 154.12.253.96

Last 5 reports on ASN: COGENT-174

Last 1 reports on domain: puthirnews.lk

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (28)

Overview

Domain Summary (9)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 154.12.253.96

Last 5 reports on ASN: COGENT-174

Last 1 reports on domain: puthirnews.lk

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (28)

Network Intrusion Detection Systems