r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4869
Expires: Wed, 14 Sep 2022 00:50:39 GMT
Date: Tue, 13 Sep 2022 23:29:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 13 Sep 2022 22:36:29 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 85sOgj-yYPIHAzBafaSbIRqSdxHfP92DLvcKgkDvpuj_g9ksTD_Wdg==
Age: 3181
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YS9hjuEbu0Gpc1spixN56ykIKW5cNuUgR7cC6C-byQ3sjPmOzOl7uA==
age: 68057
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 23:29:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
302 Moved Temporarily 0 B URL HTTP/1.0 dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
IP
ASN #42633 Deloitte Touche Tohmatsu Services, Inc.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery Phishing website detected
urlquery Phishing website detected
GET /adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2 HTTP/1.1
Host: dttsts.deloitteresources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.0 302 Moved Temporarily
Location: https://dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 13 Sep 2022 23:03:22 GMT
Cache-Control: max-age=3600
Expires: Tue, 13 Sep 2022 23:54:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2yMPQ5jU5qhTrrBuPKVg0StjNM8oWpmW3i_6EUEoQH0-9AuQmQEBMg==
Age: 1569
ocsp.digicert.com/
200 OK 471 B IP
Hash e96dbe1b54932c8f447bbbfc9d31cfb0
b15d4a54fbdf95b0af8bd34b6f8ef03055eef0cd
427326963ac1ef6ddeeaf52ab07807c694b82effa6111671ada8270b1faecdae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5489
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 23:29:31 GMT
Last-Modified: Tue, 13 Sep 2022 21:58:02 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash aeb599b875ec5121bb6a5f31e524f09b
af793fe7aed58c93b38f2edd225268dbb48d7155
8a1cb846dd923afbe9059486cc7f934aecf0ca82ff4cecdfeb86160af90db29f
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "8A1CB846DD923AFBE9059486CC7F934AECF0CA82FF4CECDFEB86160AF90DB29F"
Last-Modified: Tue, 13 Sep 2022 20:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=3544
Expires: Wed, 14 Sep 2022 00:28:35 GMT
Date: Tue, 13 Sep 2022 23:29:31 GMT
Connection: keep-alive
dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
200 OK 92 kB URL HTTP/1.1 dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
IP
ASN #42633 Deloitte Touche Tohmatsu Services, Inc.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document textAlgol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with very long lines (31926), with CRLF, LF line terminators
Hash c7d6ab13966d51072926b083b1e18f0d
9fbe4daacfbbd33ab1d0a3f2c7dec7752f26c261
470a9f024ac2a3dd9f45fef6875ea8b405d6c3a1f0dee02453eb906eb9fd5004
Analyzer Verdict Alert urlquery Phishing website detected
urlquery Phishing website detected
GET /adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2 HTTP/1.1
Host: dttsts.deloitteresources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store
Pragma: no-cache
Content-Length: 92164
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
X-Frame-Options: DENY
Date: Tue, 13 Sep 2022 23:29:31 GMT
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JK1mWrjbDfbXafUpgAZimw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IjScB2B/+VYsZvR5x+W2Mo86M+o=
dttsts.deloitteresources.com/adfs/portal/css/style.css?id=5C1A3A55743F92405637BF01AA2F2C6605951BA138ECC5FD6F884C710ADFD37F
200 OK 16 kB URL HTTP/1.1 dttsts.deloitteresources.com/adfs/portal/css/style.css?id=5C1A3A55743F92405637BF01AA2F2C6605951BA138ECC5FD6F884C710ADFD37F
IP
ASN #42633 Deloitte Touche Tohmatsu Services, Inc.
File type ASCII text, with very long lines (16287), with no line terminators
Hash dbd8823eba17e9170fed1eee561f9a68
ae75a86ea0080f739360a0813f199509755c5f2e
5c1a3a55743f92405637bf01aa2f2c6605951ba138ecc5fd6f884c710adfd37f
GET /adfs/portal/css/style.css?id=5C1A3A55743F92405637BF01AA2F2C6605951BA138ECC5FD6F884C710ADFD37F HTTP/1.1
Host: dttsts.deloitteresources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 16287
Content-Type: text/css
Expires: Thu, 13 Oct 2022 23:29:31 GMT
ETag: 5C1A3A55743F92405637BF01AA2F2C6605951BA138ECC5FD6F884C710ADFD37F
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Tue, 13 Sep 2022 23:29:31 GMT
dttsts.deloitteresources.com/adfs/portal/logo/logo.png?id=E78F1EF9F2733F7C7BC60EC9160C59DC90D84EFA34201BB5B3BECF191CC7F187
200 OK 2.5 kB URL HTTP/1.1 dttsts.deloitteresources.com/adfs/portal/logo/logo.png?id=E78F1EF9F2733F7C7BC60EC9160C59DC90D84EFA34201BB5B3BECF191CC7F187
IP
ASN #42633 Deloitte Touche Tohmatsu Services, Inc.
File type PNG image data, 135 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash 8bb9c2625b9db328e092495ea8fff3d5
6edd301a46187426a5404e1af49f7a128a220fba
e78f1ef9f2733f7c7bc60ec9160c59dc90d84efa34201bb5b3becf191cc7f187
GET /adfs/portal/logo/logo.png?id=E78F1EF9F2733F7C7BC60EC9160C59DC90D84EFA34201BB5B3BECF191CC7F187 HTTP/1.1
Host: dttsts.deloitteresources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 2549
Content-Type: image/png
Expires: Thu, 13 Oct 2022 23:29:32 GMT
ETag: E78F1EF9F2733F7C7BC60EC9160C59DC90D84EFA34201BB5B3BECF191CC7F187
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Tue, 13 Sep 2022 23:29:31 GMT
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 23:29:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:300,Open+Sans
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,Open+Sans
IP
Hash 90dbb015096dcf8ad3734056dfe60f0c
bf817f42c91ae89f769037af3be50b28871776e6
d4fc0b9d97398f4455f81df08c0fa7b7dae73e31a7bcf63a799e112038048d60
GET /css?family=Open+Sans:300,Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dttsts.deloitteresources.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 13 Sep 2022 23:29:32 GMT
date: Tue, 13 Sep 2022 23:29:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dttsts.deloitteresources.com/adfs/portal/images/deloitte_logo.png
200 OK 1.9 kB URL HTTP/1.1 dttsts.deloitteresources.com/adfs/portal/images/deloitte_logo.png
IP
ASN #42633 Deloitte Touche Tohmatsu Services, Inc.
File type PNG image data, 101 x 19, 8-bit/color RGBA, non-interlaced\012- data
Hash d9bbe2d47e32987eb91cb23bea4a15cf
7baae1b139b984731eb690ce4153955b99314a19
9f8826e11fd57c702dc2d086c52c0b00bf4e8019c7c55a5b33c33445566c4d94
GET /adfs/portal/images/deloitte_logo.png HTTP/1.1
Host: dttsts.deloitteresources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 1879
Content-Type: image/png
Expires: Thu, 13 Oct 2022 23:29:32 GMT
ETag: 9F8826E11FD57C702DC2D086C52C0B00BF4E8019C7C55A5B33C33445566C4D94
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Tue, 13 Sep 2022 23:29:31 GMT
dttsts.deloitteresources.com/adfs/portal/images/BlueArrow.png
200 OK 614 B URL HTTP/1.1 dttsts.deloitteresources.com/adfs/portal/images/BlueArrow.png
IP
ASN #42633 Deloitte Touche Tohmatsu Services, Inc.
File type PNG image data, 31 x 21, 8-bit/color RGB, non-interlaced\012- data
Hash e7efc560b9c5dc5635a148cbf04c1399
cb6829d77f979c97ab35cfb40aa505b79baf3627
b62c47075b461234e663c7877579d9333fe628b49ddd6a21388e58fc3a266c9f
GET /adfs/portal/images/BlueArrow.png HTTP/1.1
Host: dttsts.deloitteresources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Length: 614
Content-Type: image/png
Expires: Thu, 13 Oct 2022 23:29:32 GMT
ETag: B62C47075B461234E663C7877579D9333FE628B49DDD6A21388E58FC3A266C9F
Server: Microsoft-HTTPAPI/2.0 Microsoft-HTTPAPI/2.0
Date: Tue, 13 Sep 2022 23:29:31 GMT
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 23:29:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dttsts.deloitteresources.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 08:31:01 GMT
expires: Wed, 13 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
age: 53911
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 23:29:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dttsts.deloitteresources.com/favicon.ico
404 Not Found 315 B URL HTTP/1.1 dttsts.deloitteresources.com/favicon.ico
IP
ASN #42633 Deloitte Touche Tohmatsu Services, Inc.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 67932d4b695e1d6b19dfc2e3610761ff
a66898b36c94c53766e66c1a7aaeb149447ec083
ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0
GET /favicon.ico HTTP/1.1
Host: dttsts.deloitteresources.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dttsts.deloitteresources.com/adfs/ls/?client-request-id=8fe87b77-4571-4a42-beed-c347e125882c&username=&wa=wsignin1.0&wtrealm=urn:federation:MicrosoftOnline&wctx=estsredirect=2&estsrequest=rQQIARAAhZI7aNRwAMYvvfb6QG0VEQeHCgoiJpfHP7nkoEObi9dcL4_r5S6my5FL_rkmuTwul3s6uBYcFHEqugguncRJFERwKwiCm4t0E6Uo4tDRurm5fMv34xs-fkvzNEZhOIbfzBIYUbzGUTjDsLSJ4jTAUUA5bZRlSRtlAAmg6UCaNNnkwtLK6O7XBz1ho_L2-H356PrerX3kjA27kZumELOi4AC5upumcb-YzwcTzA5hiv1b59dts_sKQT4iyFcEOZjpM1SBYws4CwDOUBRDARyTNYOSPJ-QPCmV9R1PdnFc0bfdqi6OpFInNXQJyOUGIU2FiaIJuEwaQNEMUi4ZqaTVaOmUl6cWXdVON4JGamjNrqz5tORt-4bmjz_PLCvrg3SX_BtR4k7hr5lFJ0qCVhz10_3soxklhqFo81EYQivF_mIwTF3LTN0oVJMohknqwv4a2uZrYyus-5JT7vITecoFqgVZ-45AjB11lA5GjDBUmp1Ancig7rYHXatN-SFv6yXCjcSSVSV8uYHuoMGo12mOPGWrIlbZdbXWMpytqrDdY9B6Ww_8CBWHm51OqV4rTx0om4FqDiuW4d7mnb6uhgDUlYZODROuwK23NkIlgbYXedqYIoYTaasPC_jAi8ZNpRaXtUYpjHoxGHhDgybEsGf3JXF3UqXi6VCLBjyllUZO3GzxggPJttC6o4b1KpxGL7PXKMY2Ae0QqG2TFgpswkFNh6BQ2mxDwLQ5jiOJw-y503dC116Nk8hxu_DjLPJt9tLC3Er2cmY1c-MiPldcWFhaWb48v5o5mUWezZ0a9f2x-Onow4uNp1e-nP9QuYcczuXJzR2SVAZ83vLiMsvp_LY9cpuW0hz7foWytcQYgOFuw1G71hpXJB7mkIe53GFuUSy1ZEEDDPEzh-zNZ14v_l_Gd2czJ-d-_H5y_-TN8-PNPw2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Tue, 13 Sep 2022 23:29:31 GMT
Connection: close
Content-Length: 315
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6938
Expires: Wed, 14 Sep 2022 01:25:11 GMT
Date: Tue, 13 Sep 2022 23:29:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6938
Expires: Wed, 14 Sep 2022 01:25:11 GMT
Date: Tue, 13 Sep 2022 23:29:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6938
Expires: Wed, 14 Sep 2022 01:25:11 GMT
Date: Tue, 13 Sep 2022 23:29:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6938
Expires: Wed, 14 Sep 2022 01:25:11 GMT
Date: Tue, 13 Sep 2022 23:29:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8c86775f-a6ef-49b2-85ad-4272db5b9f42.webp
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8c86775f-a6ef-49b2-85ad-4272db5b9f42.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 80786e640acccfa61ef2aaa27a2a95fa
94663318844e6567f2d160d620eb9ed777fba2a3
686348c1aa038c5109c39c3491524a98bcfc5b1559568391ba7fb240a285a064
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8c86775f-a6ef-49b2-85ad-4272db5b9f42.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9467
x-amzn-requestid: d14b460e-2aa5-41c8-9a8b-4da671156014
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv3HJJoAMFWgg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7fe-0643dea6458034ab51d840d5;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: rVAqQoiN5d1Ph-lVvB7luXmG0zQJuvLi8I_B-xGbJjLkyyAid6rktw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:45:09 GMT
age: 6264
etag: "94663318844e6567f2d160d620eb9ed777fba2a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf2cc3c0-41be-4a1d-a9be-d6b88dd40b26.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf2cc3c0-41be-4a1d-a9be-d6b88dd40b26.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bd51b821b3aae8ff78457009b4f6ea05
9859aa273278b82069aa5526ee60a9f4e19a0a0c
504f91fe951f68e36254034ec2a4b01385f09cec0fd8b9e03f485c612393cb23
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf2cc3c0-41be-4a1d-a9be-d6b88dd40b26.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4995
x-amzn-requestid: 52f723b1-06bc-422a-9125-e0dca64efa65
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4EcyoAMF8Jw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-781a76432cfc5a4a7aa6fd39;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iA7z13Wn5CXuU6xhhxzi4E8deBj82xS3a88sDa3JDyv06LCMXlU6KQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:41:20 GMT
age: 6493
etag: "9859aa273278b82069aa5526ee60a9f4e19a0a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93a46c8e-0f46-4633-8b5b-51f1b2a5442d.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93a46c8e-0f46-4633-8b5b-51f1b2a5442d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 467dd8d3b95082f8cd91bcbcdd20e5fd
77e495af2af5678308ad8ef5485f925386f0b418
7cf3a1cd3868d2030bcaf1f8b4ce6a221d8e0d222487354b86f51cd5e4322115
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93a46c8e-0f46-4633-8b5b-51f1b2a5442d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7297
x-amzn-requestid: d57a4a7d-57d7-4dc0-9382-36c72d154b12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yav61HfzIAMFfxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f9de-601c198b76e739502cb3ecfd;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:45:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l8eGAJWPb4y1bUnqba2Ae0xmUW3IjJxdEWOAgw8qOzRl3R9I-ScbTw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:12:32 GMT
age: 4621
etag: "77e495af2af5678308ad8ef5485f925386f0b418"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 67104c4246b4621f998420b0e5ebbd53
2b7467d2a9e125599655986947027fe15f64dd9b
74870b17f8b2b4dd0fea0bb426edf6668de4b430c8e0cc2793d9251cd523ff61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ff3459e-f095-4850-a4fe-aaa75dd72d57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10252
x-amzn-requestid: 0e87d69b-2097-473d-87ee-d0e38021633e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yau8DFKRoAMFnww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f84c-189a00f437ca36611c4741f6;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:38:20 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: GD0bR8yri-Lzxd5H1QBToF9nN5DlxAFmXXZEGdFr81xQ1Tv4OM9OJA==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:59:17 GMT
age: 5416
etag: "2b7467d2a9e125599655986947027fe15f64dd9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 557695ec8ffeebb0272c099542a14ace
ad627b434e1c3b693d8636675bcea0f8794e0dc2
4d79c7830caa73b921d6abaa97771ab1f4dc8fd709597f01ba04c268c03b6157
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bb76515-eb77-4f38-aae2-75a885833991.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10407
x-amzn-requestid: 85df5ad9-f229-4d33-90b9-5dd28c77578a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YH396F2SIAMFnGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63196d25-3ee08f1e27cd37e96dba0f40;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 04:18:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Oep2UJdadBnTBuCy7CexUcezT0cCvm_9hroZnV-UrC9lQQxwUc4rkw==
via: 1.1 07c02ae6c53d85283eb15380264d9998.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 06:18:57 GMT
age: 61836
etag: "ad627b434e1c3b693d8636675bcea0f8794e0dc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f85dd3f15d0c55c06f712bbfb6f55fa
2c053f4774c450e42effdc440e89fb2ce232bad3
0035f6235d012f4c2ffbc8e414e82bbba3235c51e20f7b1ebebcdff47be285fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9cb9807-03d5-4b00-9a0f-61f9c12f0e63.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8836
x-amzn-requestid: cae5f1fa-005b-4819-900e-e0cec381e450
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavYxGUCoAMF5Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f904-1be4cae92b407bed2a128109;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:41:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Edqp_EdPzoXt6xQtd24wiBzLSdqQ2HYzOGExvqkcJCUwSN5Kn7lZcQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:00:47 GMT
age: 5326
etag: "2c053f4774c450e42effdc440e89fb2ce232bad3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
170.194.148.52
93.184.220.29
23.13.44.131
23.33.119.27