Report - bitbucket.org/slack-files/windows/downloads/SIackSetupWin.iso

Report Overview

Submitted URL
bitbucket.org/slack-files/windows/downloads/SIackSetupWin.iso
IP
104.192.141.1
ASN
#16509 AMAZON-02
Submitted
2023-03-16 02:54:50
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-25T18:14:26Z	782 B	2.4 kB	35.241.9.150
bitbucket.org	13657	2012-05-21T19:07:59Z	2023-03-17T07:29:03Z	490 B	3.0 kB	104.192.141.1
bbuseruploads.s3.amazonaws.com	419617	2014-05-24T17:44:20Z	2023-03-25T05:37:58Z	1.2 kB	7.6 MB	52.216.138.243
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-25T18:12:03Z	3.0 kB	8.0 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-26T05:11:12Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-26T05:11:59Z	333 B	391 B	34.117.237.239
ocsp.sca1b.amazontrust.com	1015	2017-03-03T16:20:51Z	2019-03-27T05:05:54Z	350 B	945 B	54.230.245.110
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-26T05:10:29Z	606 B	127 B	35.163.38.240
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-26T05:09:08Z	3.2 kB	52 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-03-16	medium	bitbucket.org/slack-files/windows/downloads/SIackSetupWin.iso	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
bbuseruploads.s3.amazonaws.com/3acf4d1c-8450-4b9e-bd9e-f221065e6221/downloads/619cd180-f3c3-406a-aa50-1d99c6ca40cb/SIackSetupWin.iso?response-content-disposition=attachment%3B%20filename%3D%22SIackSetupWin.iso%22&AWSAccessKeyId=ASIA6KOSE3BNNROQF3WC&Signature=qQKc8f5SVqLHRbjBN1wSMJDG6tU%3D&x-amz-security-token=FwoGZXIvYXdzEFQaDCwcFYX6GiR3qrqgiCK%2BAZndddlkwc3sbsAfJRA2Z03QtKFcrBgZCHG%2FcD%2BE7A9h8YDuTKyBoFn6hljhauW%2BhNgPkcD%2Fp1LS%2BR%2B9G8EYQHiQD95cfIMR8z3EOMhy8DyERWhqmzWAVfF51UWz5%2BcmYh9S%2Fcu3CgJf8MIyZTERbU36ZE4PeC9dRNFn9THpKSm29pfFcdQyAaffFHhjzwm5Fxg4llOKyAPcNTnPpEE1%2BppE%2BhA3Lmz8BVro0RMbZVc1W7Sqc0n0BJAKkugBmn8o74nKoAYyLSi%2FVCmtBWMpEL0tKoSPkBrGQ9OjRQQ9FnlNxW7Ej3GpeGbBRwQHHhF0hEuBNw%3D%3D&Expires=1678937079
IP
52.216.138.243
ASN
#16509 AMAZON-02

File type
ISO 9660 CD-ROM filesystem data 'Setup'\012- data
Size
7.6 MB (7618560 bytes)
Hash
05d8e1398832c2dbac7df6f687a0ca2b
27ed48967dd5cf89fe5527a677f5763e00a46d85
2cb5e093f5a3f66eb869547917b426a614d43fcde752f46de192a8f2f9602671

Detections

Analyzer	Verdict	Alert
VirusTotal	31/59

JavaScript (0)

HTTP Transactions (23)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1424d2734290cfd767b86da0ee0da3bc
875b1243bca41177411ac6af710d2bb96f45a0ac
70b5bb76774526a0cf131445ae2f8639085c3449812497df457f4bc78089917b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70B5BB76774526A0CF131445AE2F8639085C3449812497DF457F4BC78089917B"
Last-Modified: Wed, 15 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6721
Expires: Thu, 16 Mar 2023 04:46:40 GMT
Date: Thu, 16 Mar 2023 02:54:39 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
25389646a2daae58c728e01095973033
651619a503a0f21dd5a8135cce5240f51bae1ab5
8ecd890bd13e92a07acabbd187e71d59adc1f896b249ac1165444ea1f9e21bef

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8ECD890BD13E92A07ACABBD187E71D59ADC1F896B249AC1165444EA1F9E21BEF"
Last-Modified: Tue, 14 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5882
Expires: Thu, 16 Mar 2023 04:32:41 GMT
Date: Thu, 16 Mar 2023 02:54:39 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
003080c91d03081096b019a53f63a8e9
b3d742e037ae313261033338d05d8155f1bf7e6b
d64a58d2f2bca32cb33f6fb8581978238ffa9919a3b2ffb4ce056a57fb7c9917

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D64A58D2F2BCA32CB33F6FB8581978238FFA9919A3B2FFB4CE056A57FB7C9917"
Last-Modified: Wed, 15 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10094
Expires: Thu, 16 Mar 2023 05:42:53 GMT
Date: Thu, 16 Mar 2023 02:54:39 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 16 Mar 2023 02:09:27 GMT
content-type: application/json
age: 2712
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: DTAsfSKlXdfvDM8/uGnQRNSVaBZr2lmX5nwogBrAZ56USXg9YcJ38Z0Tm+UiqlBRj68ifKm4B2c1BYxgjpBc+Q==
x-amz-request-id: BKZB6BJTF26P4011
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 16 Mar 2023 02:23:01 GMT
age: 1898
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 16 Mar 2023 02:54:39 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

bitbucket.org/slack-files/windows/downloads/SIackSetupWin.iso

104.192.141.1

302 Found

0 B

URL HTTP/2
bitbucket.org/slack-files/windows/downloads/SIackSetupWin.iso
IP
104.192.141.1:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /slack-files/windows/downloads/SIackSetupWin.iso HTTP/1.1
Host: bitbucket.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
content-security-policy-report-only: connect-src bitbucket.org *.bitbucket.org bb-inf.net *.bb-inf.net id.atlassian.com api.atlassian.com wss://bitbucketci-ws-service.services.atlassian.com analytics.atlassian.com as.atlassian.com api-private.stg.atlassian.com api-private.atlassian.com atl-global.atlassian.com cofs.staging.public.atl-paas.net cofs.prod.public.atl-paas.net intake.opbeat.com api.media.atlassian.com api.segment.io xid.statuspage.io xid.atlassian.com xid.sourcetreeapp.com bam.nr-data.net bam-cell.nr-data.net www.google-analytics.com stats.g.doubleclick.net sentry.io *.ingest.sentry.io events.launchdarkly.com app.launchdarkly.com bqlf8qjztdtr.statuspage.io https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; base-uri 'self'; style-src 'self' 'unsafe-inline' https://aui-cdn.atlassian.com https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; frame-ancestors 'self' start.atlassian.com start.stg.atlassian.com atlaskit.atlassian.com; script-src 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' http: https: https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; object-src 'none'; report-uri https://web-security-reports.services.atlassian.com/csp-report/bb-website
server: envoy
x-usage-quota-remaining: 990527.159
vary: Accept-Language, Origin
x-usage-request-cost: 9578.30
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
x-b3-traceid: 5e7d0ca3f91d4761
x-usage-output-ops: 0
x-used-mesh: False
x-dc-location: Micros-3
strict-transport-security: max-age=31536000; includeSubDomains; preload
date: Thu, 16 Mar 2023 02:54:39 GMT
x-usage-user-time: 0.252089
x-usage-system-time: 0.035260
location: https://bbuseruploads.s3.amazonaws.com/3acf4d1c-8450-4b9e-bd9e-f221065e6221/downloads/619cd180-f3c3-406a-aa50-1d99c6ca40cb/SIackSetupWin.iso?response-content-disposition=attachment%3B%20filename%3D%22SIackSetupWin.iso%22&AWSAccessKeyId=ASIA6KOSE3BNNROQF3WC&Signature=qQKc8f5SVqLHRbjBN1wSMJDG6tU%3D&x-amz-security-token=FwoGZXIvYXdzEFQaDCwcFYX6GiR3qrqgiCK%2BAZndddlkwc3sbsAfJRA2Z03QtKFcrBgZCHG%2FcD%2BE7A9h8YDuTKyBoFn6hljhauW%2BhNgPkcD%2Fp1LS%2BR%2B9G8EYQHiQD95cfIMR8z3EOMhy8DyERWhqmzWAVfF51UWz5%2BcmYh9S%2Fcu3CgJf8MIyZTERbU36ZE4PeC9dRNFn9THpKSm29pfFcdQyAaffFHhjzwm5Fxg4llOKyAPcNTnPpEE1%2BppE%2BhA3Lmz8BVro0RMbZVc1W7Sqc0n0BJAKkugBmn8o74nKoAYyLSi%2FVCmtBWMpEL0tKoSPkBrGQ9OjRQQ9FnlNxW7Ej3GpeGbBRwQHHhF0hEuBNw%3D%3D&Expires=1678937079
expires: Thu, 16 Mar 2023 02:54:39 GMT
x-served-by: abe2d5a3023a
x-envoy-upstream-service-time: 387
content-language: en
x-view-name: bitbucket.apps.downloads.views.download_file
x-static-version: 953f19b09c35
x-render-time: 0.3766326904296875
x-usage-input-ops: 0
x-frame-options: SAMEORIGIN
x-version: 953f19b09c35
x-request-count: 765
x-cache-info: not cacheable; response specified "Cache-Control: no-cache"
content-length: 0
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Pragma, Last-Modified, ETag, Retry-After, Cache-Control, Content-Type, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 16 Mar 2023 02:14:31 GMT
age: 2409
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4353e40dea39897876467013220ab1ad
ecdbe764620d0d760f9333ff2c30d0f7d9b5d9a8
f23a16dcfff2a742fcbd5fff52cb6edcb9485eea5e732574f3124371b21abfb3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F23A16DCFFF2A742FCBD5FFF52CB6EDCB9485EEA5E732574F3124371B21ABFB3"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7885
Expires: Thu, 16 Mar 2023 05:06:05 GMT
Date: Thu, 16 Mar 2023 02:54:40 GMT
Connection: keep-alive

ocsp.sca1b.amazontrust.com/

54.230.245.110

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
54.230.245.110:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
4f8a7a851dd40597993b95120406967f
61658021d78b32c1f219e7e129583dc745ab3927
ec4d5886942a366b1fa03b04b9eea698565f58001928616d928553cb1c2a24f4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 16 Mar 2023 02:54:40 GMT
Last-Modified: Thu, 16 Mar 2023 02:43:45 GMT
Server: ECAcc (bsa/EB6C)
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: WiSC09Y8uExdkoAS8XVfCDM5BylqyyhEyQatRKQgDMflEwsAWuwtyQ==
Age: 655

push.services.mozilla.com/

35.163.38.240

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.163.38.240:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0fAm6gS11bB7usgBi+Uw/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: POrlqQL6xYoJKSw/rmxyOduh8n0=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2358
Expires: Thu, 16 Mar 2023 03:33:59 GMT
Date: Thu, 16 Mar 2023 02:54:41 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2358
Expires: Thu, 16 Mar 2023 03:33:59 GMT
Date: Thu, 16 Mar 2023 02:54:41 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2358
Expires: Thu, 16 Mar 2023 03:33:59 GMT
Date: Thu, 16 Mar 2023 02:54:41 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2358
Expires: Thu, 16 Mar 2023 03:33:59 GMT
Date: Thu, 16 Mar 2023 02:54:41 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2358
Expires: Thu, 16 Mar 2023 03:33:59 GMT
Date: Thu, 16 Mar 2023 02:54:41 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8487 bytes)
Hash
be71491cee9b47dc3ffb23b4fdff25b3
79c7d22c8df6d305f46c5779ccb9f25169d4d111
e785896e5840fb901ddd0118bef3ccad6b59a96d8eef0e8ccd9c95a3c261ba45

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8487
x-amzn-requestid: f904b483-c6ae-4318-9932-4e48d8188585
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvTpAEUAIAMFUig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f996c-5905cad6148df52e4f10ecf5;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:45:16 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: iFDVPB-wzZyIG9xYU-f3rnebwRbaWDo90aD520OcgsptZR0vmkc2ew==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 f3ac324bf05099849ebda59e8136db0e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 22:00:52 GMT
age: 17629
etag: "79c7d22c8df6d305f46c5779ccb9f25169d4d111"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3457606a-172f-40ba-abde-a1c3b3b8e147.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5229 bytes)
Hash
96e4b439d314c0c13470ef2fa95d5065
5f6701794c0c09d4a8105588866f8f9f0e9e6ac4
5b3f902b0196c75913e8c142ecc1572b624a0ffb5107dd6864999acb607c022a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3457606a-172f-40ba-abde-a1c3b3b8e147.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5229
x-amzn-requestid: 1409603c-781c-47d0-8252-0b8657d79c3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BqBnSFsVIAMFdeg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640d7c94-3bb7c0f324c9540c643bc1fa;Sampled=0
x-amzn-remapped-date: Sun, 12 Mar 2023 07:17:40 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: sWInr1j3UpOoZr4jLnjNlo2qLzh61p39e45DaiNq7vGGQZ_fAzwy5Q==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 b618c0f73dc30c968057784ed0185d7a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 13:50:39 GMT
age: 47042
etag: "5f6701794c0c09d4a8105588866f8f9f0e9e6ac4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28ea495a-9a14-4b7a-bf29-31b4af0b1307.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (8021 bytes)
Hash
6a9438432e2551c19eff442623db83fe
6cb9cd6a44e0036dc7e30ab67c57ba6a9c500c4b
cc41500c7ff86eae7b3fc552bce4844fe7b0eed0266cd27340d4c5ccf1f91026

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28ea495a-9a14-4b7a-bf29-31b4af0b1307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8021
x-amzn-requestid: 6f86f843-812c-4f7c-ad2d-d41c0405a6b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14DnFY2IAMF7XA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a16-0da03a2e2a479bce16f2b7c3;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ffwG3zrDUifHiQfL3eIjtPWGMJpNippphnVFcLB9E_C8oPh0Aqbwiw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:48:11 GMT
age: 18390
etag: "6cb9cd6a44e0036dc7e30ab67c57ba6a9c500c4b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf18cafd-6d4c-4553-9c73-25d72f724795.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.9 kB (7939 bytes)
Hash
660709688360bca87ae14758d956c97e
425f5e45db2d8e846644a3b7242ebf3898bd27ec
8748c18187494d83210395915b055e76b3754c47717f8c166a05c11a98c806aa

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf18cafd-6d4c-4553-9c73-25d72f724795.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7939
x-amzn-requestid: 6a321606-ddf6-4055-9e10-0f25515a337b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14nTHAYoAMFzBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123afb-1d01b9ac74b5933443527208;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:39:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: t7PbQpCjGVS0WNIIYSe_HJ8yX4W9iVwh13v3DvJfmz1ybnm0PFxB8A==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:47:58 GMT
etag: "425f5e45db2d8e846644a3b7242ebf3898bd27ec"
content-type: image/jpeg
age: 18403
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed94fad-f5b5-4116-a1f3-fc7b8739e672.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10012 bytes)
Hash
e120ef1e92524af6a4503702b85da2bc
4fbde535fa4f7bd54f3388c4b0038ca87b84bdc7
3f564e37568c7d5eb4539ed717f8393e170974b229bbce658250ef182256b562

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ed94fad-f5b5-4116-a1f3-fc7b8739e672.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10012
x-amzn-requestid: 312a94f2-1759-42c1-9278-61b8302ae351
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14BcGVJoAMFSBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a08-1e9507826c44792b19fc811e;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: U5S6rH3n-O0WE4wdVxNmlR_RU6pTaHkt1jmdc4qF0McgwBZfDvTYxQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:48:10 GMT
age: 18391
etag: "4fbde535fa4f7bd54f3388c4b0038ca87b84bdc7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04285abf-0522-44d5-a610-dbdc572f8fe2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6454 bytes)
Hash
d5eecb38b600f3ae033932d71741b6d0
d71287bc6c7e50bd37ee73c6c61a005b1fe668e3
09df757cd6681e511c8d83e8e2a0fdd3b19b2b8f3823e57541d7838df2f3371e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04285abf-0522-44d5-a610-dbdc572f8fe2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6454
x-amzn-requestid: 75db4751-34af-4af4-9233-4bd44b3a78c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14BnEUiIAMFw2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a0a-5c0c24470a9e35e564d243ca;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: qtypC9EvYuK_evQLVpMrv3J8RA0Ym7D4PKp4b7FsKOftt1M-UiDYJQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9825a45e2b387a61504c0c3df20048ee.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:35:06 GMT
age: 19175
etag: "d71287bc6c7e50bd37ee73c6c61a005b1fe668e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

bbuseruploads.s3.amazonaws.com/3acf4d1c-8450-4b9e-bd9e-f221065e6221/downloads/619cd180-f3c3-406a-aa50-1d99c6ca40cb/SIackSetupWin.iso?response-content-disposition=attachment%3B%20filename%3D%22SIackSetupWin.iso%22&AWSAccessKeyId=ASIA6KOSE3BNNROQF3WC&Signature=qQKc8f5SVqLHRbjBN1wSMJDG6tU%3D&x-amz-security-token=FwoGZXIvYXdzEFQaDCwcFYX6GiR3qrqgiCK%2BAZndddlkwc3sbsAfJRA2Z03QtKFcrBgZCHG%2FcD%2BE7A9h8YDuTKyBoFn6hljhauW%2BhNgPkcD%2Fp1LS%2BR%2B9G8EYQHiQD95cfIMR8z3EOMhy8DyERWhqmzWAVfF51UWz5%2BcmYh9S%2Fcu3CgJf8MIyZTERbU36ZE4PeC9dRNFn9THpKSm29pfFcdQyAaffFHhjzwm5Fxg4llOKyAPcNTnPpEE1%2BppE%2BhA3Lmz8BVro0RMbZVc1W7Sqc0n0BJAKkugBmn8o74nKoAYyLSi%2FVCmtBWMpEL0tKoSPkBrGQ9OjRQQ9FnlNxW7Ej3GpeGbBRwQHHhF0hEuBNw%3D%3D&Expires=1678937079

52.216.138.243

200 OK

7.6 MB

URL HTTP/1.1
bbuseruploads.s3.amazonaws.com/3acf4d1c-8450-4b9e-bd9e-f221065e6221/downloads/619cd180-f3c3-406a-aa50-1d99c6ca40cb/SIackSetupWin.iso?response-content-disposition=attachment%3B%20filename%3D%22SIackSetupWin.iso%22&AWSAccessKeyId=ASIA6KOSE3BNNROQF3WC&Signature=qQKc8f5SVqLHRbjBN1wSMJDG6tU%3D&x-amz-security-token=FwoGZXIvYXdzEFQaDCwcFYX6GiR3qrqgiCK%2BAZndddlkwc3sbsAfJRA2Z03QtKFcrBgZCHG%2FcD%2BE7A9h8YDuTKyBoFn6hljhauW%2BhNgPkcD%2Fp1LS%2BR%2B9G8EYQHiQD95cfIMR8z3EOMhy8DyERWhqmzWAVfF51UWz5%2BcmYh9S%2Fcu3CgJf8MIyZTERbU36ZE4PeC9dRNFn9THpKSm29pfFcdQyAaffFHhjzwm5Fxg4llOKyAPcNTnPpEE1%2BppE%2BhA3Lmz8BVro0RMbZVc1W7Sqc0n0BJAKkugBmn8o74nKoAYyLSi%2FVCmtBWMpEL0tKoSPkBrGQ9OjRQQ9FnlNxW7Ej3GpeGbBRwQHHhF0hEuBNw%3D%3D&Expires=1678937079
IP
52.216.138.243:0
ASN
#16509 AMAZON-02

File type
ISO 9660 CD-ROM filesystem data 'Setup'\012- data
Size
7.6 MB (7618560 bytes)
Hash
05d8e1398832c2dbac7df6f687a0ca2b
27ed48967dd5cf89fe5527a677f5763e00a46d85
2cb5e093f5a3f66eb869547917b426a614d43fcde752f46de192a8f2f9602671

HTTP Headers

GET /3acf4d1c-8450-4b9e-bd9e-f221065e6221/downloads/619cd180-f3c3-406a-aa50-1d99c6ca40cb/SIackSetupWin.iso?response-content-disposition=attachment%3B%20filename%3D%22SIackSetupWin.iso%22&AWSAccessKeyId=ASIA6KOSE3BNNROQF3WC&Signature=qQKc8f5SVqLHRbjBN1wSMJDG6tU%3D&x-amz-security-token=FwoGZXIvYXdzEFQaDCwcFYX6GiR3qrqgiCK%2BAZndddlkwc3sbsAfJRA2Z03QtKFcrBgZCHG%2FcD%2BE7A9h8YDuTKyBoFn6hljhauW%2BhNgPkcD%2Fp1LS%2BR%2B9G8EYQHiQD95cfIMR8z3EOMhy8DyERWhqmzWAVfF51UWz5%2BcmYh9S%2Fcu3CgJf8MIyZTERbU36ZE4PeC9dRNFn9THpKSm29pfFcdQyAaffFHhjzwm5Fxg4llOKyAPcNTnPpEE1%2BppE%2BhA3Lmz8BVro0RMbZVc1W7Sqc0n0BJAKkugBmn8o74nKoAYyLSi%2FVCmtBWMpEL0tKoSPkBrGQ9OjRQQ9FnlNxW7Ej3GpeGbBRwQHHhF0hEuBNw%3D%3D&Expires=1678937079 HTTP/1.1
Host: bbuseruploads.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
x-amz-id-2: r9kMcLLpp5sneptrKEzWZBW/ojb0kUzcEIH8IUjpa1L53nSSsU+n56uLfxv4jD3RgJXj0il2F5w=
x-amz-request-id: ZNDG37X3T7EKEY3J
Date: Thu, 16 Mar 2023 02:54:41 GMT
Last-Modified: Thu, 17 Nov 2022 14:37:14 GMT
ETag: "05d8e1398832c2dbac7df6f687a0ca2b"
x-amz-server-side-encryption: AES256
x-amz-version-id: 1XLMtE8CSKKKL1Vzkshff_BEAncGmjn_
Content-Disposition: attachment; filename="SIackSetupWin.iso"
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 7618560

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (23)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN