Report - bitbucket.org/aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim

Report Overview

Submitted URL
bitbucket.org/aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim_ESP.rar
IP
104.192.141.1
ASN
#16509 AMAZON-02
Submitted
2023-03-16 05:13:03
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-25T18:14:26Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-26T05:11:12Z	413 B	5.9 kB	34.160.144.191
ocsp.sca1b.amazontrust.com	1015	2017-03-03T16:20:51Z	2019-03-27T05:05:54Z	350 B	1.0 kB	54.230.245.118
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-26T05:10:29Z	606 B	127 B	35.164.181.193
bbuseruploads.s3.amazonaws.com	419617	2014-05-24T17:44:20Z	2023-03-25T05:37:58Z	1.2 kB	38 MB	52.216.246.60
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-25T18:12:03Z	3.0 kB	8.0 kB	23.36.76.226
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-26T05:11:59Z	333 B	391 B	34.117.237.239
bitbucket.org	13657	2012-05-21T19:07:59Z	2023-03-17T07:29:03Z	526 B	3.1 kB	104.192.141.1
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-26T05:09:08Z	3.2 kB	65 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-03-16	medium	bitbucket.org/aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim_ESP.rar	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
bbuseruploads.s3.amazonaws.com/1fec2273-ddf6-4b5e-99b8-aaf452254701/downloads/dd02a440-8a48-4585-a3d4-f2ae942bd3f5/Warzone_2.0_Unlock_tool_Aim_ESP.rar?response-content-disposition=attachment%3B%20filename%3D%22Warzone_2.0_Unlock_tool_Aim_ESP.rar%22&AWSAccessKeyId=ASIA6KOSE3BNJGWH5W4X&Signature=h99vIf2ARn2e5B3D8FR6%2FeqBlGw%3D&x-amz-security-token=FwoGZXIvYXdzEFcaDOolWNHDpIG0Xm4FUiK%2BAZQ9EuDMhbrs17T3WCtbvb3E%2BO%2BWH9W0mbY8Des%2BzTHJx4xIxTRorbzRRTvut8mEJ%2FpOA50uxcBJl%2F3nWORFSi%2BNQSU1r4gN7brVbleVkTp25LoylUhGUdd9b1ONS7m5MKpDEj8cp7eAj9EDqQeg5logThEwtK5mbvFps2KpRbjcaHJgdzkpWPm5Lxk7%2BFjlNAzbJAY3frnCdwabGa3VBEKok0LNs7QZU%2F9bnRgMq9Za8EJ9znqXr%2F6nnKDG%2FRYoiMrKoAYyLdAd6uu%2BEmmtrLDrmLmx9zl69%2BAOi6V%2BYc53cHDMWprUI8nejou0AgLczqdCPg%3D%3D&Expires=1678945296
IP
52.216.246.60
ASN
#16509 AMAZON-02

File type
RAR archive data, v5\012- data
Size
38 MB (37586686 bytes)
Hash
26a2f4bf1f7b460fe319627ddb12dad4
27a6632b6c080e5b410c691c5a41d18c91db47a0
050ca4341ee81ff98efc88a03a82a2e41b63377be68464a1e170be393b15ce2f

JavaScript (0)

HTTP Transactions (23)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1424d2734290cfd767b86da0ee0da3bc
875b1243bca41177411ac6af710d2bb96f45a0ac
70b5bb76774526a0cf131445ae2f8639085c3449812497df457f4bc78089917b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70B5BB76774526A0CF131445AE2F8639085C3449812497DF457F4BC78089917B"
Last-Modified: Wed, 15 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17969
Expires: Thu, 16 Mar 2023 10:12:19 GMT
Date: Thu, 16 Mar 2023 05:12:50 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3fe71d20fae0ef9598de076d7c898ee5
8217796b8c261e184e11147a43a34dc28d723e8b
8f4124c1b2ae90fdec229e26dc0f2e8f4e9ace6011baa2cbd9bef884188c8fee

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F4124C1B2AE90FDEC229E26DC0F2E8F4E9ACE6011BAA2CBD9BEF884188C8FEE"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7288
Expires: Thu, 16 Mar 2023 07:14:18 GMT
Date: Thu, 16 Mar 2023 05:12:50 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cef8425d927aae677234ca535562b58b
823b45ffe59ac234f49d38516baf528a9daded85
c2d2e2be0e1484259271be471ff46345fd332c071389f9ef92f637e7ee666ea6

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2D2E2BE0E1484259271BE471FF46345FD332C071389F9EF92F637E7EE666EA6"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5315
Expires: Thu, 16 Mar 2023 06:41:25 GMT
Date: Thu, 16 Mar 2023 05:12:50 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 16 Mar 2023 04:14:21 GMT
content-type: application/json
age: 3509
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: W/mGGoM5wamrm+byNLPXXln+gzSceSt02hHnc66KvuDmmVr838R3TOHVyckw77663T3xmeOabRlfqJYg7DHzNg==
x-amz-request-id: ANWEWSVHH0R5PJ13
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 16 Mar 2023 04:23:04 GMT
age: 2986
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 16 Mar 2023 05:12:50 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

bitbucket.org/aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim_ESP.rar

104.192.141.1

302 Found

0 B

URL HTTP/2
bitbucket.org/aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim_ESP.rar
IP
104.192.141.1:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim_ESP.rar HTTP/1.1
Host: bitbucket.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
content-security-policy-report-only: object-src 'none'; connect-src bitbucket.org *.bitbucket.org bb-inf.net *.bb-inf.net id.atlassian.com api.atlassian.com wss://bitbucketci-ws-service.services.atlassian.com analytics.atlassian.com as.atlassian.com api-private.stg.atlassian.com api-private.atlassian.com atl-global.atlassian.com cofs.staging.public.atl-paas.net cofs.prod.public.atl-paas.net intake.opbeat.com api.media.atlassian.com api.segment.io xid.statuspage.io xid.atlassian.com xid.sourcetreeapp.com bam.nr-data.net bam-cell.nr-data.net www.google-analytics.com stats.g.doubleclick.net sentry.io *.ingest.sentry.io events.launchdarkly.com app.launchdarkly.com bqlf8qjztdtr.statuspage.io https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; base-uri 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; frame-ancestors 'self' start.atlassian.com start.stg.atlassian.com atlaskit.atlassian.com; style-src 'self' 'unsafe-inline' https://aui-cdn.atlassian.com https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; script-src 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' http: https: https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; report-uri https://web-security-reports.services.atlassian.com/csp-report/bb-website
server: envoy
x-usage-quota-remaining: 999205.017
vary: Accept-Language, Origin
x-usage-request-cost: 807.73
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: text/html; charset=utf-8
x-b3-traceid: 95678de9ab71179f
x-usage-output-ops: 0
x-used-mesh: False
x-dc-location: Micros-3
strict-transport-security: max-age=31536000; includeSubDomains; preload
date: Thu, 16 Mar 2023 05:12:50 GMT
x-usage-user-time: 0.024232
x-usage-system-time: 0.000000
location: https://bbuseruploads.s3.amazonaws.com/1fec2273-ddf6-4b5e-99b8-aaf452254701/downloads/dd02a440-8a48-4585-a3d4-f2ae942bd3f5/Warzone_2.0_Unlock_tool_Aim_ESP.rar?response-content-disposition=attachment%3B%20filename%3D%22Warzone_2.0_Unlock_tool_Aim_ESP.rar%22&AWSAccessKeyId=ASIA6KOSE3BNJGWH5W4X&Signature=h99vIf2ARn2e5B3D8FR6%2FeqBlGw%3D&x-amz-security-token=FwoGZXIvYXdzEFcaDOolWNHDpIG0Xm4FUiK%2BAZQ9EuDMhbrs17T3WCtbvb3E%2BO%2BWH9W0mbY8Des%2BzTHJx4xIxTRorbzRRTvut8mEJ%2FpOA50uxcBJl%2F3nWORFSi%2BNQSU1r4gN7brVbleVkTp25LoylUhGUdd9b1ONS7m5MKpDEj8cp7eAj9EDqQeg5logThEwtK5mbvFps2KpRbjcaHJgdzkpWPm5Lxk7%2BFjlNAzbJAY3frnCdwabGa3VBEKok0LNs7QZU%2F9bnRgMq9Za8EJ9znqXr%2F6nnKDG%2FRYoiMrKoAYyLdAd6uu%2BEmmtrLDrmLmx9zl69%2BAOi6V%2BYc53cHDMWprUI8nejou0AgLczqdCPg%3D%3D&Expires=1678945296
expires: Thu, 16 Mar 2023 05:12:50 GMT
x-served-by: 048939e43877
x-envoy-upstream-service-time: 53
content-language: en
x-view-name: bitbucket.apps.downloads.views.download_file
x-static-version: d930b94e27ba
x-render-time: 0.04265546798706055
x-usage-input-ops: 0
x-frame-options: SAMEORIGIN
x-version: d930b94e27ba
x-request-count: 1590
x-cache-info: not cacheable; response specified "Cache-Control: no-cache"
content-length: 0
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Length, Retry-After, Content-Type, Expires, Alert, Pragma, ETag, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 16 Mar 2023 04:17:21 GMT
age: 3330
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

54.230.245.118

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
54.230.245.118:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
4f8a7a851dd40597993b95120406967f
61658021d78b32c1f219e7e129583dc745ab3927
ec4d5886942a366b1fa03b04b9eea698565f58001928616d928553cb1c2a24f4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=120336
Date: Thu, 16 Mar 2023 05:12:51 GMT
Etag: "6411becb-1d7"
Expires: Fri, 17 Mar 2023 14:38:27 GMT
Last-Modified: Wed, 15 Mar 2023 12:49:15 GMT
Server: ECAcc (nya/1C5E)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iFPE3Y-fSEHqWkcpb90UpQM2t0axpvXaDCVE2auCAv27XZaPHh0POw==
Age: 6552

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4353e40dea39897876467013220ab1ad
ecdbe764620d0d760f9333ff2c30d0f7d9b5d9a8
f23a16dcfff2a742fcbd5fff52cb6edcb9485eea5e732574f3124371b21abfb3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F23A16DCFFF2A742FCBD5FFF52CB6EDCB9485EEA5E732574F3124371B21ABFB3"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16727
Expires: Thu, 16 Mar 2023 09:51:38 GMT
Date: Thu, 16 Mar 2023 05:12:51 GMT
Connection: keep-alive

push.services.mozilla.com/

35.164.181.193

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.164.181.193:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QoHHSaHOeXpc+JX7OwG65A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nSspleWQ2mku6jhzA2OtkCPX+uM=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Thu, 16 Mar 2023 09:47:10 GMT
Date: Thu, 16 Mar 2023 05:12:52 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Thu, 16 Mar 2023 09:47:10 GMT
Date: Thu, 16 Mar 2023 05:12:52 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Thu, 16 Mar 2023 09:47:10 GMT
Date: Thu, 16 Mar 2023 05:12:52 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Thu, 16 Mar 2023 09:47:10 GMT
Date: Thu, 16 Mar 2023 05:12:52 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16458
Expires: Thu, 16 Mar 2023 09:47:10 GMT
Date: Thu, 16 Mar 2023 05:12:52 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d07b666-063c-4cf3-a0c4-1177d7d790d7.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d07b666-063c-4cf3-a0c4-1177d7d790d7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10420 bytes)
Hash
700c18d1ec67a0294820dc03192c701d
3526e56b8a0cfdb679a0b2bdfe6baedcf93dcf05
17bd83b0e861fad1689dbaa2ae5ce1910fb98b03ecc3b2b8b4f1884f35bb2b14

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d07b666-063c-4cf3-a0c4-1177d7d790d7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10420
x-amzn-requestid: c3d16b66-ad8c-406e-8441-fabb52b0f09a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14BnHLBIAMFpiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a0a-4d80f92064ba7a1c3478a836;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: PAEKBs61UTE3M-jOJVGso9FXE26e31zUSuGCogOZFfi4oLA_DfVRKw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 22:12:18 GMT
age: 25234
etag: "3526e56b8a0cfdb679a0b2bdfe6baedcf93dcf05"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdad4172a-505a-4014-9bcf-f13aa53b1686.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8758 bytes)
Hash
8154be92a2d44a0162f1cc673921529f
d56d45d301ddd803f7d9e69dee60694cb9cbc598
1ce79bc57af6f1b848992c86f300589070ed7343f8ac9cf1911e9f53f1278dcb

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdad4172a-505a-4014-9bcf-f13aa53b1686.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8758
x-amzn-requestid: 7c07a43a-3a52-4bea-8ff0-f2e0247c680d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14rgEQfIAMF2Qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123b16-5f46de1a5896bb08271f930d;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:39:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: vMFWcAD7HS_GJJyrg6ysO_9CO7OFJkiGYjb1s0oN1DbcjFP8EaroYA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 1d000d0dfe9d69b4983f619fdc5499d6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:51:17 GMT
etag: "d56d45d301ddd803f7d9e69dee60694cb9cbc598"
content-type: image/jpeg
age: 26495
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f2431c-a8dc-417b-a69d-872c1926357e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.2 kB (7236 bytes)
Hash
59b4d5ead77a00c1fa0f931de2e2cd5a
a1d4c0ff3f3a161c76a0059811b4cd5fc5a5afc2
b2cff32e66aaac5308bc63c01e1d3f7e7e52e9aa7bf5e4f83e4c92c3a43966a6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f2431c-a8dc-417b-a69d-872c1926357e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7236
x-amzn-requestid: d95168ad-60bc-4bd3-91c2-c91ce7e07fd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14DcGSHoAMFS8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a15-5773b4b257788e1f342c9057;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: d5JjlW0uttfUdLVY4Y_iMJ4tjch53gEp9MIfZLW6yJhcS9qr_I1HeQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 5c35539543902c678280929df206948c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:49:56 GMT
etag: "a1d4c0ff3f3a161c76a0059811b4cd5fc5a5afc2"
content-type: image/jpeg
age: 26576
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e02a23-fba2-4658-8b4b-5051efc66524.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.9 kB (5911 bytes)
Hash
9f645317cc7df2be82e071e424811e5b
a3d9b7b750cc43051ea3e116455607b0501b7bad
42c119194a2042ca7bb42788f5412b46d170c4e33c30fd769a8f80389f49d292

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e02a23-fba2-4658-8b4b-5051efc66524.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5911
x-amzn-requestid: c551bf29-c601-4800-9215-784aecc6bf2f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14DIEQQoAMF0hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a13-13e6840c59c44e6b130aea9e;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: lsmggBZWmsWsvNEWrwkUW5HMDhEdL-ma5qxVuhzVIQ32YjI7T2cgNg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:49:56 GMT
etag: "a3d9b7b750cc43051ea3e116455607b0501b7bad"
content-type: image/jpeg
age: 26576
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8487 bytes)
Hash
be71491cee9b47dc3ffb23b4fdff25b3
79c7d22c8df6d305f46c5779ccb9f25169d4d111
e785896e5840fb901ddd0118bef3ccad6b59a96d8eef0e8ccd9c95a3c261ba45

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8487
x-amzn-requestid: 92381f1a-0140-47e9-a971-594a7de36c3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BkEcBGizoAMFgOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640b1ab3-1a54b65a5d7083e62dcb85ab;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 11:55:31 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: w_13YsBBteASlPvTrgLhnI-QiuUjEcR9q-bADLbCRl6B-uwcPS3TQA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 c5c7edc18be1805f007e0576da02e554.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 23:00:02 GMT
age: 22370
etag: "79c7d22c8df6d305f46c5779ccb9f25169d4d111"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

18 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c2898f-dfca-4b38-8bb4-ea9223acf947.gif
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 296 x 148\012- data
Size
18 kB (17452 bytes)
Hash
f370e83ad32370272aff3de804fc9847
cc9dee8e36b4930360c9495a9733ebe34b303c78
0e706585240425dec6d2a3a6e34ebdc070d803a50a866bff66c5a9e9dc16a701

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c2898f-dfca-4b38-8bb4-ea9223acf947.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 17452
x-amzn-requestid: f3bd1a50-8c20-411f-97ae-a6b884c2acc4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14nHHWAIAMFw0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123afa-6f4827544877224e3a2c8bab;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:39:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 8bcadAdGqO9JqyL9TsON6_AUIVcUDK7LrIJgz2Wyvt1lVvgm9Tla-g==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 b2d3922a177f6cecf9222a78a0a1ad32.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:39:06 GMT
etag: "cc9dee8e36b4930360c9495a9733ebe34b303c78"
content-type: image/gif
age: 27226
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

bbuseruploads.s3.amazonaws.com/1fec2273-ddf6-4b5e-99b8-aaf452254701/downloads/dd02a440-8a48-4585-a3d4-f2ae942bd3f5/Warzone_2.0_Unlock_tool_Aim_ESP.rar?response-content-disposition=attachment%3B%20filename%3D%22Warzone_2.0_Unlock_tool_Aim_ESP.rar%22&AWSAccessKeyId=ASIA6KOSE3BNJGWH5W4X&Signature=h99vIf2ARn2e5B3D8FR6%2FeqBlGw%3D&x-amz-security-token=FwoGZXIvYXdzEFcaDOolWNHDpIG0Xm4FUiK%2BAZQ9EuDMhbrs17T3WCtbvb3E%2BO%2BWH9W0mbY8Des%2BzTHJx4xIxTRorbzRRTvut8mEJ%2FpOA50uxcBJl%2F3nWORFSi%2BNQSU1r4gN7brVbleVkTp25LoylUhGUdd9b1ONS7m5MKpDEj8cp7eAj9EDqQeg5logThEwtK5mbvFps2KpRbjcaHJgdzkpWPm5Lxk7%2BFjlNAzbJAY3frnCdwabGa3VBEKok0LNs7QZU%2F9bnRgMq9Za8EJ9znqXr%2F6nnKDG%2FRYoiMrKoAYyLdAd6uu%2BEmmtrLDrmLmx9zl69%2BAOi6V%2BYc53cHDMWprUI8nejou0AgLczqdCPg%3D%3D&Expires=1678945296

52.216.246.60

200 OK

38 MB

URL HTTP/1.1
bbuseruploads.s3.amazonaws.com/1fec2273-ddf6-4b5e-99b8-aaf452254701/downloads/dd02a440-8a48-4585-a3d4-f2ae942bd3f5/Warzone_2.0_Unlock_tool_Aim_ESP.rar?response-content-disposition=attachment%3B%20filename%3D%22Warzone_2.0_Unlock_tool_Aim_ESP.rar%22&AWSAccessKeyId=ASIA6KOSE3BNJGWH5W4X&Signature=h99vIf2ARn2e5B3D8FR6%2FeqBlGw%3D&x-amz-security-token=FwoGZXIvYXdzEFcaDOolWNHDpIG0Xm4FUiK%2BAZQ9EuDMhbrs17T3WCtbvb3E%2BO%2BWH9W0mbY8Des%2BzTHJx4xIxTRorbzRRTvut8mEJ%2FpOA50uxcBJl%2F3nWORFSi%2BNQSU1r4gN7brVbleVkTp25LoylUhGUdd9b1ONS7m5MKpDEj8cp7eAj9EDqQeg5logThEwtK5mbvFps2KpRbjcaHJgdzkpWPm5Lxk7%2BFjlNAzbJAY3frnCdwabGa3VBEKok0LNs7QZU%2F9bnRgMq9Za8EJ9znqXr%2F6nnKDG%2FRYoiMrKoAYyLdAd6uu%2BEmmtrLDrmLmx9zl69%2BAOi6V%2BYc53cHDMWprUI8nejou0AgLczqdCPg%3D%3D&Expires=1678945296
IP
52.216.246.60:0
ASN
#16509 AMAZON-02

File type
RAR archive data, v5\012- data
Size
38 MB (37586686 bytes)
Hash
26a2f4bf1f7b460fe319627ddb12dad4
27a6632b6c080e5b410c691c5a41d18c91db47a0
050ca4341ee81ff98efc88a03a82a2e41b63377be68464a1e170be393b15ce2f

HTTP Headers

GET /1fec2273-ddf6-4b5e-99b8-aaf452254701/downloads/dd02a440-8a48-4585-a3d4-f2ae942bd3f5/Warzone_2.0_Unlock_tool_Aim_ESP.rar?response-content-disposition=attachment%3B%20filename%3D%22Warzone_2.0_Unlock_tool_Aim_ESP.rar%22&AWSAccessKeyId=ASIA6KOSE3BNJGWH5W4X&Signature=h99vIf2ARn2e5B3D8FR6%2FeqBlGw%3D&x-amz-security-token=FwoGZXIvYXdzEFcaDOolWNHDpIG0Xm4FUiK%2BAZQ9EuDMhbrs17T3WCtbvb3E%2BO%2BWH9W0mbY8Des%2BzTHJx4xIxTRorbzRRTvut8mEJ%2FpOA50uxcBJl%2F3nWORFSi%2BNQSU1r4gN7brVbleVkTp25LoylUhGUdd9b1ONS7m5MKpDEj8cp7eAj9EDqQeg5logThEwtK5mbvFps2KpRbjcaHJgdzkpWPm5Lxk7%2BFjlNAzbJAY3frnCdwabGa3VBEKok0LNs7QZU%2F9bnRgMq9Za8EJ9znqXr%2F6nnKDG%2FRYoiMrKoAYyLdAd6uu%2BEmmtrLDrmLmx9zl69%2BAOi6V%2BYc53cHDMWprUI8nejou0AgLczqdCPg%3D%3D&Expires=1678945296 HTTP/1.1
Host: bbuseruploads.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
x-amz-id-2: G4KuVAEryh/SKwWxUv8gn9r/1xCAJTTNUAMfPm2khXQUdavccEeNk0xKl2PJizin1ve+kqkia/k=
x-amz-request-id: 9Z6G0M9KM0BZB1KW
Date: Thu, 16 Mar 2023 05:12:52 GMT
Last-Modified: Mon, 28 Nov 2022 15:00:42 GMT
ETag: "224a1daa3cf46b3fde9996113e60e2d5-5"
x-amz-server-side-encryption: AES256
x-amz-version-id: yhlgjw9W_E0hXmuer5zoUA5fnM0oukU4
Content-Disposition: attachment; filename="Warzone_2.0_Unlock_tool_Aim_ESP.rar"
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 37586686

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (23)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type