Report - www.ons.gov.uk/peoplepopulationandcommunity/healthandsocialcare/conditionsanddiseases/bulletins/prevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk/4august2022

Report Overview

URL

www.ons.gov.uk/peoplepopulationandcommunity/healthandsocialcare/conditionsanddiseases/bulletins/prevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk/4august2022
IP

104.16.230.22

ASN

#13335 CLOUDFLARENET
Submitted

2023-01-30T20:52:17Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

2
Threat Detection Systems

0

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org (7)	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2366	6204	23.36.76.226
ocsp.digicert.com (8)	86	2012-05-21T09:02:23Z	2023-03-13T06:00:13Z	2728	4614	93.184.220.29
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606	127	35.165.41.15
img-getpocket.cdn.mozilla.net (5)	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	2705	48481	34.120.237.76
www.ons.gov.uk (22)	263704	2017-01-30T08:31:59Z	2023-03-10T07:34:52Z	23787	45258	104.16.231.22
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413	5842	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333	391	34.117.237.239
cdn.ons.gov.uk (10)	361111	2018-08-26T09:06:44Z	2023-03-09T15:10:42Z	5588	301119	104.16.230.22
ocsp.pki.goog (5)	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	1715	3496	142.250.74.131
d3js.org (1)	73612	2015-10-27T21:00:48Z	2023-03-13T08:25:52Z	355	835	188.114.99.234
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782	2372	35.241.9.150

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-30T20:52:19Z	medium	Client IP	104.16.231.22	ET HUNTING Suspicious GET Request with Possible COVID-19 URI M1
2023-01-30T20:52:19Z	medium	Client IP	104.16.231.22	ET HUNTING Suspicious GET Request with Possible COVID-19 URI M2

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (63)

URL IP Response Size

www.ons.gov.uk/peoplepopulationandcommunity/healthandsocialcare/conditionsanddiseases/bulletins/prevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk/4august2022

104.16.231.22

301 Moved Permanently

URL HTTP/1.1

www.ons.gov.uk/peoplepopulationandcommunity/healthandsocialcare/conditionsanddiseases/bulletins/prevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk/4august2022
IP

104.16.231.22:0
ASN

#13335 CLOUDFLARENET

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

NIDS	Severity	Alert
suricata	medium	ET HUNTING Suspicious GET Request with Possible COVID-19 URI M1
suricata	medium	ET HUNTING Suspicious GET Request with Possible COVID-19 URI M2

HTTP Headers

                                        GET /peoplepopulationandcommunity/healthandsocialcare/conditionsanddiseases/bulletins/prevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk/4august2022 HTTP/1.1
Host: www.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 301 Moved Permanently
Date: Mon, 30 Jan 2023 20:52:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 30 Jan 2023 21:52:06 GMT
Location: https://www.ons.gov.uk/peoplepopulationandcommunity/healthandsocialcare/conditionsanddiseases/bulletins/prevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk/4august2022
Set-Cookie: __cf_bm=5GJsVIt3BxqrB.jg.5sBJxtdgq2esZTQx25hMKhG_ic-1675111926-0-AXudxUCAL4IYoXWaEc1YH3h9pPlX0TCKKH7Eul7z3KasGFGvguRY9VaG4TjNFLoDneOwD6aaFDhvoCgCuUUUEvs=; path=/; expires=Mon, 30-Jan-23 21:22:06 GMT; domain=.ons.gov.uk; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791d16e1df12b4ff-OSL

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

5eb7c9bc996a0ff420e58af45526f053

8c2614832b8efe1c9da0bbd465d6f3f172d95a9e

c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9816
Expires: Mon, 30 Jan 2023 23:35:42 GMT
Date: Mon, 30 Jan 2023 20:52:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

0c35c3ec659d3a26ea97e68d787bb043

d97e3672244efec5b7814f2d8a734cd1a9387854

4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10413
Expires: Mon, 30 Jan 2023 23:45:39 GMT
Date: Mon, 30 Jan 2023 20:52:06 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

bf0c602d32b3c14606f22a86183b5e3c

6eabd8d83475eba731968abe1a05a8bfd272f160

6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 20:43:13 GMT
content-type: application/json
age: 533
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

302c7548412192add063ad6c8b99cf3b

e5d178931a27db036ce8daae302594d3ff7050b8

fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11712
Expires: Tue, 31 Jan 2023 00:07:18 GMT
Date: Mon, 30 Jan 2023 20:52:06 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

7b922915ebf1fa3639b333f994c74f24

144a3f80b98fd0652d4614f24cf6cbbee40f8938

adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: /DV7bQTdi3eAmctMFS7XccEuhXod9SjPfF5i9OtoyGufnKsXebUoqU3D8eir337D7fwFZ6NyYqY=
x-amz-request-id: 0TGQN30PHZ5ZZ2S2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 20:50:53 GMT
age: 73
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

280
Hash

1c8cc82b78b81644c28a11f3d7947fd4

c0abcc4944fd26bf4db036e775c7feb35cef9dc9

bc7fe34310605ccb1f46b095a64a3dcdf1612bcdabc37cd60c5d8cfc11b8e407

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3062
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:06 GMT
Etag: "63d6a64e-117"
Last-Modified: Mon, 30 Jan 2023 20:01:04 GMT
Server: ECS (amb/6B80)
X-Cache: HIT
Content-Length: 280

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 20:52:06 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 20:41:41 GMT
age: 625
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

22b9916fc1fafc9bdc9bb37f9eac8a9a

86f640e134a741a0f906a8e3a0f5c6659dd0e394

a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8169
Expires: Mon, 30 Jan 2023 23:08:15 GMT
Date: Mon, 30 Jan 2023 20:52:06 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

278

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

278
Hash

bcba1a1123b404bdda3e0184697ae395

9bc23e139a09af85faccb43e1d5b0a8d1854a127

7ef9b64a26723ee668ab6d86def89b2c10d4b1e6942f1b882b42765dddd2246f

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3809
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:06 GMT
Last-Modified: Mon, 30 Jan 2023 19:48:37 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

278

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

278
Hash

bcba1a1123b404bdda3e0184697ae395

9bc23e139a09af85faccb43e1d5b0a8d1854a127

7ef9b64a26723ee668ab6d86def89b2c10d4b1e6942f1b882b42765dddd2246f

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6503
Cache-Control: max-age=91292
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:06 GMT
Etag: "63d6d62b-116"
Expires: Tue, 31 Jan 2023 22:13:38 GMT
Last-Modified: Sun, 29 Jan 2023 20:25:15 GMT
Server: ECS (amb/6B80)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

278

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

278
Hash

bcba1a1123b404bdda3e0184697ae395

9bc23e139a09af85faccb43e1d5b0a8d1854a127

7ef9b64a26723ee668ab6d86def89b2c10d4b1e6942f1b882b42765dddd2246f

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4393
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:06 GMT
Last-Modified: Mon, 30 Jan 2023 19:38:54 GMT
Server: ECS (amb/6B88)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

278

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

278
Hash

bcba1a1123b404bdda3e0184697ae395

9bc23e139a09af85faccb43e1d5b0a8d1854a127

7ef9b64a26723ee668ab6d86def89b2c10d4b1e6942f1b882b42765dddd2246f

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1989
Cache-Control: max-age=86778
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:06 GMT
Etag: "63d6d62b-116"
Expires: Tue, 31 Jan 2023 20:58:24 GMT
Last-Modified: Sun, 29 Jan 2023 20:25:15 GMT
Server: ECS (amb/6B8C)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

ec749643b093646a8b847d6efdf745f3

bfe48ed251681b4499b02cd79f833089ffcc014d

65eebd7be6b5e1a98a4514a5cc14027012839631ea1f6615a9f5decd29acc872

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 809
Cache-Control: max-age=171991
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:06 GMT
Etag: "63d827a4-117"
Expires: Wed, 01 Feb 2023 20:38:37 GMT
Last-Modified: Mon, 30 Jan 2023 20:25:08 GMT
Server: ECS (amb/6B94)
X-Cache: HIT
Content-Length: 279

cdn.ons.gov.uk/sixteens/30948d6/js/main.js

104.16.230.22

200 OK

47307

URL HTTP/2

cdn.ons.gov.uk/sixteens/30948d6/js/main.js
IP

104.16.230.22:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

47307
Hash

1c209dbc8fc9832a828ae3e20a1b75cb

533a550118dcec106e74518b628f2eb3f52144eb

87234b76db3074dca44c190d665730b4ebfae9beb1731538c8a969aab674e06a

HTTP Headers

                                        GET /sixteens/30948d6/js/main.js HTTP/1.1
Host: cdn.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:07 GMT
content-type: application/javascript
cache-control: public, max-age=1209600
cf-bgj: minify
etag: W/"78b001c0a49c57e28d45beaf79f42f7e"
last-modified: Fri, 22 Jul 2022 13:46:19 GMT
vary: Accept-Encoding
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-id: kCfl-sil3M2Mrdc0Ttk40711JvbpdeAt3z6hUo7ZSA31yK1fMmhLVA==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
cf-cache-status: HIT
age: 338439
expires: Mon, 13 Feb 2023 20:52:06 GMT
server: cloudflare
cf-ray: 791d16e7af90b4fa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

cdn.ons.gov.uk/assets/fonts/open-sans-bold/OpenSans-Bold-webfont.woff2

104.16.230.22

200 OK

17660

URL HTTP/2

cdn.ons.gov.uk/assets/fonts/open-sans-bold/OpenSans-Bold-webfont.woff2
IP

104.16.230.22:0
ASN

#13335 CLOUDFLARENET

Magic

Web Open Font Format (Version 2), TrueType, length 17660, version 1.6554\012- data

Size

17660
Hash

4a8b873c7adf81d09d8b8b6b36fc7284

2c5cb9645aed2f2afe9769c20db875dba24c83f7

4a585a6710de19ceb7ff8b1f3df81b2883bdc0db9ca621bcca48b3209cd62df1

HTTP Headers

                                        GET /assets/fonts/open-sans-bold/OpenSans-Bold-webfont.woff2 HTTP/1.1
Host: cdn.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ons.gov.uk
Connection: keep-alive
Referer: https://cdn.ons.gov.uk/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:07 GMT
content-type: binary/octet-stream
content-length: 17660
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 0
last-modified: Wed, 15 Dec 2021 10:55:07 GMT
etag: "4a8b873c7adf81d09d8b8b6b36fc7284"
cache-control: public, max-age=1209600
vary: Origin, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Kv0ABqmQ_Ey2dfK4qdxe2XcsCHOr68pwyXFuzMoCihWlQd3WJizomg==
cf-cache-status: HIT
age: 481788
expires: Mon, 13 Feb 2023 20:52:07 GMT
accept-ranges: bytes
set-cookie: __cf_bm=cirElCEOyD0lhUysZzZwSbfzefztf6KlC0EEBTpBzgA-1675111927-0-AUR7qELIh664KWKpBpys+oeTTzOgN7FaN81uYMuxlOYIPlp9RFcCLEgJO148I1rHGqHXKy/tDVtz689OVZcG2oQ=; path=/; expires=Mon, 30-Jan-23 21:22:07 GMT; domain=.ons.gov.uk; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 791d16e8d99eb4fa-OSL
X-Firefox-Spdy: h2

cdn.ons.gov.uk/assets/fonts/open-sans-regular/OpenSans-Regular-webfont.woff2

104.16.230.22

200 OK

17816

URL HTTP/2

cdn.ons.gov.uk/assets/fonts/open-sans-regular/OpenSans-Regular-webfont.woff2
IP

104.16.230.22:0
ASN

#13335 CLOUDFLARENET

Magic

Web Open Font Format (Version 2), TrueType, length 17816, version 1.6554\012- data

Size

17816
Hash

e41e57283669cf061a237893af2a10b3

aebb67d96c405c99a6acc408fa739e75e85f5e4b

c611d03e6d5c8697646c1b040f2cedcf0978e980e51fc53c40049d8c3045765a

HTTP Headers

                                        GET /assets/fonts/open-sans-regular/OpenSans-Regular-webfont.woff2 HTTP/1.1
Host: cdn.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ons.gov.uk
Connection: keep-alive
Referer: https://cdn.ons.gov.uk/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:07 GMT
content-type: binary/octet-stream
content-length: 17816
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 0
last-modified: Wed, 15 Dec 2021 10:55:07 GMT
etag: "e41e57283669cf061a237893af2a10b3"
cache-control: public, max-age=1209600
vary: Origin, Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6ee89b3e6dcaec24bb10163246825fba.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: fkUe5zsQmK8mq5cFLEg42Y8xE9Tc4irXXF7SFlWiz8f-XxQuVMO_5g==
cf-cache-status: HIT
age: 481788
expires: Mon, 13 Feb 2023 20:52:07 GMT
accept-ranges: bytes
set-cookie: __cf_bm=hataJPVr03.kE.cu78UCCXi_L2QZE02igeUdG8HJZpQ-1675111927-0-AWvs+KUl4EXD+jCzy6OcnMsLGcnlvMXf8HrQrbSzNX+AUuE5DhIZmv9ng2EnvrxSqmLHHrY39XssUn8BWtkyWPw=; path=/; expires=Mon, 30-Jan-23 21:22:07 GMT; domain=.ons.gov.uk; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 791d16e8d9a8b4fa-OSL
X-Firefox-Spdy: h2

cdn.ons.gov.uk/assets/images/logo-ogl-footer.svg

104.16.230.22

200 OK

91943

URL HTTP/2

cdn.ons.gov.uk/assets/images/logo-ogl-footer.svg
IP

104.16.230.22:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

91943
Hash

423faaafd98fcb857600bdf82bbcce5e

684631ab2355e87036679df295b842c93ee1e140

9112e7b17b13f3ea2ce474bef6811858940b5fb1a8496d09686b379970ad3430

HTTP Headers

                                        GET /assets/images/logo-ogl-footer.svg HTTP/1.1
Host: cdn.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:06 GMT
content-type: image/svg+xml
last-modified: Wed, 15 Dec 2021 10:55:09 GMT
etag: W/"89152ba5d85e80825058c7c14aedb82a"
cache-control: public, max-age=1209600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gf274y8Fm7CJu2N6dKLxKboS7GF4mr3xjNbTWtAIvZMjj7O51v8Eug==
cf-cache-status: HIT
age: 481788
expires: Mon, 13 Feb 2023 20:52:06 GMT
server: cloudflare
cf-ray: 791d16e79f6eb4fa-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

d81f874741beb45c89de8bb5c6de438e

a251ab903e654953631d84721479bbae55aa5cdf

ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

35.165.41.15

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

35.165.41.15:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UXQegTX55EAe/sGTMqLjiw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 181QXsnYNXnzkexQPOE786A4Ro4=

www.ons.gov.uk/chartconfig?uri=%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022%2F0f2e8165&width=700&_=1675111940750

104.16.231.22

200 OK

2673

URL HTTP/2

www.ons.gov.uk/chartconfig?uri=%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022%2F0f2e8165&width=700&_=1675111940750
IP

104.16.231.22:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text, with very long lines (507)

Size

2673
Hash

178a9e134e236a23a50c745c2b78b35a

ab523a837fdf6f9e3d6171b29706dbd60017383c

cb580b52e7ea8fe592dd76ef331d8a3bf41594ee59a18ae42135701e559bbb8b

HTTP Headers

                                        GET /chartconfig?uri=%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022%2F0f2e8165&width=700&_=1675111940750 HTTP/1.1
Host: www.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.ons.gov.uk/peoplepopulationandcommunity/healthandsocialcare/conditionsanddiseases/bulletins/prevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk/4august2022
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:07 GMT
content-type: application/json;charset=utf-8
content-length: 2673
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: public, max-age=14400
content-encoding: gzip
etag: fc09469cadadbcba145dd9d2048b4bfbda548304--gzip
vary: Accept-Encoding, User-Agent
x-frame-options: SAMEORIGIN, SAMEORIGIN
allow: DELETE, GET, HEAD, POST, PUT, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1
cf-cache-status: MISS
expires: Tue, 31 Jan 2023 00:52:07 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 791d16e9ebb1fab8-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

40bac282ee9730b7a7fde839fcf58736

be00063ec5c760560f34663d0a6a9cad87cfebe4

45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.ons.gov.uk/visualisations/dvc2091/fig2/index.html?initialWidth=700&childId=1b3-47f0-a6a2-d6eb75712dff&parentTitle=Prevalence%20of%20ongoing%20symptoms%20following%20coronavirus%20(COVID-19)%20infection%20in%20the%20UK%20-%20Office%20for%20National%20Statistics&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022

104.16.231.22

200 OK

2958

URL HTTP/2

www.ons.gov.uk/visualisations/dvc2091/fig2/index.html?initialWidth=700&childId=1b3-47f0-a6a2-d6eb75712dff&parentTitle=Prevalence%20of%20ongoing%20symptoms%20following%20coronavirus%20(COVID-19)%20infection%20in%20the%20UK%20-%20Office%20for%20National%20Statistics&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022
IP

104.16.231.22:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

2958
Hash

a265302892202e2118788e81257cb7cf

796f0d643674813edae2252e11a54f94c6a94bcc

1bfcdabfda3fc1fcd98e46d93b3aa610ef66170cfa0458343a897547c37f06d7

HTTP Headers

                                        GET /visualisations/dvc2091/fig2/index.html?initialWidth=700&childId=1b3-47f0-a6a2-d6eb75712dff&parentTitle=Prevalence%20of%20ongoing%20symptoms%20following%20coronavirus%20(COVID-19)%20infection%20in%20the%20UK%20-%20Office%20for%20National%20Statistics&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022 HTTP/1.1
Host: www.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/peoplepopulationandcommunity/healthandsocialcare/conditionsanddiseases/bulletins/prevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk/4august2022
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:07 GMT
content-type: text/html;charset=utf-8
cache-control: public, max-age=14400
vary: Accept-Encoding, User-Agent
allow: DELETE, GET, HEAD, POST, PUT, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1
cf-cache-status: MISS
expires: Tue, 31 Jan 2023 00:52:07 GMT
server: cloudflare
cf-ray: 791d16e9fbc6fab8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

www.ons.gov.uk/visualisations/dvc2091/lib/globalStyle.css

104.16.231.22

200 OK

1421

URL HTTP/2

www.ons.gov.uk/visualisations/dvc2091/lib/globalStyle.css
IP

104.16.231.22:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text

Size

1421
Hash

63435c5362f6584c5bcf6f6b71b58c2b

65dd494e58a640db49915678a88d26f2c058fe17

6140845036d30869c991e89c76eb8d7fff8fc952427df999669414fb481841d2

HTTP Headers

                                        GET /visualisations/dvc2091/lib/globalStyle.css HTTP/1.1
Host: www.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/visualisations/dvc2091/fig2/index.html?initialWidth=700&childId=1b3-47f0-a6a2-d6eb75712dff&parentTitle=Prevalence%20of%20ongoing%20symptoms%20following%20coronavirus%20(COVID-19)%20infection%20in%20the%20UK%20-%20Office%20for%20National%20Statistics&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:07 GMT
content-type: text/css;charset=utf-8
content-length: 1421
cache-control: public, max-age=14400
content-encoding: gzip
etag: 55352fc4f126fa892680d86506f39e3be1d8105b--gzip
vary: Accept-Encoding, User-Agent
allow: DELETE, GET, HEAD, POST, PUT, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1
cf-cache-status: MISS
expires: Tue, 31 Jan 2023 00:52:07 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 791d16ec7e27fab8-OSL
X-Firefox-Spdy: h2

www.ons.gov.uk/visualisations/dvc2091/lib/modernizr.svg.min.js

104.16.231.22

200 OK

838

URL HTTP/2

www.ons.gov.uk/visualisations/dvc2091/lib/modernizr.svg.min.js
IP

104.16.231.22:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text, with very long lines (1502)

Size

838
Hash

6c256a7d6d80c551629282292b11f46f

ee60980269bcc947c71d177b2b5e19d32352e92d

35f419647d1a000d4fc1b68b8845145a940b4d47c55173d4258a13e4c9ad6278

HTTP Headers

                                        GET /visualisations/dvc2091/lib/modernizr.svg.min.js HTTP/1.1
Host: www.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/visualisations/dvc2091/fig2/index.html?initialWidth=700&childId=1b3-47f0-a6a2-d6eb75712dff&parentTitle=Prevalence%20of%20ongoing%20symptoms%20following%20coronavirus%20(COVID-19)%20infection%20in%20the%20UK%20-%20Office%20for%20National%20Statistics&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:08 GMT
content-type: application/javascript;charset=utf-8
content-length: 838
cache-control: public, max-age=14400
content-encoding: gzip
etag: 856b1eacd091fc6a62fbbd873ef36d2dd2dd39e8--gzip
vary: Accept-Encoding, User-Agent
allow: DELETE, GET, HEAD, POST, PUT, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1
cf-cache-status: MISS
expires: Tue, 31 Jan 2023 00:52:07 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 791d16ec8e34fab8-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

f075625a67cefc01c034a3c732ec8023

c3ef563fbf1cf30f75fc931f82426a0f859ccb6d

75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

f075625a67cefc01c034a3c732ec8023

c3ef563fbf1cf30f75fc931f82426a0f859ccb6d

75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cdn.ons.gov.uk/vendor/d3/4.2.7/d3.min.js

104.16.230.22

200 OK

116213

URL HTTP/2

cdn.ons.gov.uk/vendor/d3/4.2.7/d3.min.js
IP

104.16.230.22:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

116213
Hash

d4504350f1a8369e5a28d20a9f026ef2

76c698aab41e0ab1aaffcb1daeaf6214310740f7

1dc26104fa61111e3471887859cc6b8ff2396d5f77cb710cdb69af33b0f43a36

HTTP Headers

                                        GET /vendor/d3/4.2.7/d3.min.js HTTP/1.1
Host: cdn.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:07 GMT
content-type: application/javascript
last-modified: Wed, 15 Dec 2021 13:40:26 GMT
etag: W/"817759e6bca94d58c55da341e4944106"
cache-control: public, max-age=1209600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7c56a1efd2427548060973d13fa756e2.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: qVY3PKtAf0dB5NWYIa1UAVWmmcWWMtUZPEtDGXYhbPXqWTuXnm5kvw==
cf-cache-status: HIT
age: 479332
expires: Mon, 13 Feb 2023 20:52:07 GMT
server: cloudflare
cf-ray: 791d16ec8ed5b4fa-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

f075625a67cefc01c034a3c732ec8023

c3ef563fbf1cf30f75fc931f82426a0f859ccb6d

75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.ons.gov.uk/visualisations/dvc2091/fig2/top/index.html?initialWidth=700&childId=top&parentTitle=Long%20COVID&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fvisualisations%2Fdvc2091%2Ffig2%2Findex.html%3FinitialWidth%3D700%26childId%3D1b3-47f0-a6a2-d6eb75712dff%26parentTitle%3DPrevalence%2520of%2520ongoing%2520symptoms%2520following%2520coronavirus%2520(COVID-19)%2520infection%2520in%2520the%2520UK%2520-%2520Office%2520for%2520National%2520Statistics%26parentUrl%3Dhttps%253A%252F%252Fwww.ons.gov.uk%252Fpeoplepopulationandcommunity%252Fhealthandsocialcare%252Fconditionsanddiseases%252Fbulletins%252Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%252F4august2022

104.16.231.22

200 OK

6253

URL HTTP/2

www.ons.gov.uk/visualisations/dvc2091/fig2/top/index.html?initialWidth=700&childId=top&parentTitle=Long%20COVID&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fvisualisations%2Fdvc2091%2Ffig2%2Findex.html%3FinitialWidth%3D700%26childId%3D1b3-47f0-a6a2-d6eb75712dff%26parentTitle%3DPrevalence%2520of%2520ongoing%2520symptoms%2520following%2520coronavirus%2520(COVID-19)%2520infection%2520in%2520the%2520UK%2520-%2520Office%2520for%2520National%2520Statistics%26parentUrl%3Dhttps%253A%252F%252Fwww.ons.gov.uk%252Fpeoplepopulationandcommunity%252Fhealthandsocialcare%252Fconditionsanddiseases%252Fbulletins%252Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%252F4august2022
IP

104.16.231.22:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

6253
Hash

7527348f7d763f4cd147ec41271088cd

2c507ca7aa25e049f4c3feabed8c1bb955bb6b6e

ff0a6eac500d8a5badea978f8b3a497512c194bcbca07dc016e0c04f22eebf26

HTTP Headers

                                        GET /visualisations/dvc2091/fig2/top/index.html?initialWidth=700&childId=top&parentTitle=Long%20COVID&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fvisualisations%2Fdvc2091%2Ffig2%2Findex.html%3FinitialWidth%3D700%26childId%3D1b3-47f0-a6a2-d6eb75712dff%26parentTitle%3DPrevalence%2520of%2520ongoing%2520symptoms%2520following%2520coronavirus%2520(COVID-19)%2520infection%2520in%2520the%2520UK%2520-%2520Office%2520for%2520National%2520Statistics%26parentUrl%3Dhttps%253A%252F%252Fwww.ons.gov.uk%252Fpeoplepopulationandcommunity%252Fhealthandsocialcare%252Fconditionsanddiseases%252Fbulletins%252Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%252F4august2022 HTTP/1.1
Host: www.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/visualisations/dvc2091/fig2/index.html?initialWidth=700&childId=1b3-47f0-a6a2-d6eb75712dff&parentTitle=Prevalence%20of%20ongoing%20symptoms%20following%20coronavirus%20(COVID-19)%20infection%20in%20the%20UK%20-%20Office%20for%20National%20Statistics&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:08 GMT
content-type: text/html;charset=utf-8
cache-control: public, max-age=14400
vary: Accept-Encoding, User-Agent
allow: DELETE, GET, HEAD, POST, PUT, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1
cf-cache-status: MISS
expires: Tue, 31 Jan 2023 00:52:08 GMT
server: cloudflare
cf-ray: 791d16ee387afab8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

dfb84426fed94988d5c90372baff059c

f1c4740830034ff8a5759d59ae3f657ea524d083

d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5636
Expires: Mon, 30 Jan 2023 22:26:04 GMT
Date: Mon, 30 Jan 2023 20:52:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

dfb84426fed94988d5c90372baff059c

f1c4740830034ff8a5759d59ae3f657ea524d083

d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5636
Expires: Mon, 30 Jan 2023 22:26:04 GMT
Date: Mon, 30 Jan 2023 20:52:08 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg

34.120.237.76

200 OK

10997

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

10997
Hash

65c02d8a1b0d6a210cb2a649c5c67469

027dbc7a104c922904f067ed15d696c363c11774

89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:08:57 GMT
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
age: 81791
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.76.226:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

dfb84426fed94988d5c90372baff059c

f1c4740830034ff8a5759d59ae3f657ea524d083

d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5636
Expires: Mon, 30 Jan 2023 22:26:04 GMT
Date: Mon, 30 Jan 2023 20:52:08 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

278

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

278
Hash

6e8c0d337429cc6facc91ba572f38f5f

bdb013a0430c04c3fa2e05fd10312160695255df

86eabd36a14a922c04e146d24fda423965ba9d244351aea737c3684d17fa8873

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6572
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:08 GMT
Last-Modified: Mon, 30 Jan 2023 19:02:36 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 278

cdn.ons.gov.uk/vendor/pym/1.3.2/pym.min.js

104.16.230.22

200 OK

3323

URL HTTP/2

cdn.ons.gov.uk/vendor/pym/1.3.2/pym.min.js
IP

104.16.230.22:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

3323
Hash

5a6abc9c2f59f0810f78794351067d13

58d78efd9001bad05c85ddc3cb986913059b2213

c63b31acf3a218b240509b7de45159a055e616803bae07fff7f1feb5d4a763bd

HTTP Headers

                                        GET /vendor/pym/1.3.2/pym.min.js HTTP/1.1
Host: cdn.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:07 GMT
content-type: application/javascript
last-modified: Wed, 15 Dec 2021 13:40:36 GMT
etag: W/"d4257b34abdd55b0b5b4459db41c2c1c"
cache-control: public, max-age=1209600
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c275031486c6f7b744b8d30847e98b14.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA6-C1
x-amz-cf-id: tErfikyy4KfoFaxXH0sSUfMLfXe3brq3GjfD1mrkJFO2Jbc-yG4dDQ==
cf-cache-status: HIT
age: 424159
expires: Mon, 13 Feb 2023 20:52:07 GMT
server: cloudflare
cf-ray: 791d16ec8edcb4fa-OSL
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11568

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

11568
Hash

b7a0759c043594fbe85af422b59b8227

a05cfaad16078f42218dae233da38f6f5dff8487

e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HvqpQI-tR9W2NwvIgoi8loQaD--rOgVYFdLdkdlaXMhe4ts9mYqahg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:50:16 GMT
age: 82912
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8464

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8464
Hash

fe31ee140c2fd62e616c8a1edc9e78bb

7aa5fbdc8156514770ae620e81f1afef1c77890f

799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y6bDvcD7a3-A4DLC3cSdZT-yewV1kkFqcGr7AMuqvUeGA4A0pgF4wQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:59:27 GMT
age: 82361
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.ons.gov.uk/visualisations/dvc2091/fig2/bottom/index.html?initialWidth=700&childId=bottom&parentTitle=Long%20COVID&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fvisualisations%2Fdvc2091%2Ffig2%2Findex.html%3FinitialWidth%3D700%26childId%3D1b3-47f0-a6a2-d6eb75712dff%26parentTitle%3DPrevalence%2520of%2520ongoing%2520symptoms%2520following%2520coronavirus%2520(COVID-19)%2520infection%2520in%2520the%2520UK%2520-%2520Office%2520for%2520National%2520Statistics%26parentUrl%3Dhttps%253A%252F%252Fwww.ons.gov.uk%252Fpeoplepopulationandcommunity%252Fhealthandsocialcare%252Fconditionsanddiseases%252Fbulletins%252Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%252F4august2022

104.16.231.22

200 OK

14517

URL HTTP/2

www.ons.gov.uk/visualisations/dvc2091/fig2/bottom/index.html?initialWidth=700&childId=bottom&parentTitle=Long%20COVID&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fvisualisations%2Fdvc2091%2Ffig2%2Findex.html%3FinitialWidth%3D700%26childId%3D1b3-47f0-a6a2-d6eb75712dff%26parentTitle%3DPrevalence%2520of%2520ongoing%2520symptoms%2520following%2520coronavirus%2520(COVID-19)%2520infection%2520in%2520the%2520UK%2520-%2520Office%2520for%2520National%2520Statistics%26parentUrl%3Dhttps%253A%252F%252Fwww.ons.gov.uk%252Fpeoplepopulationandcommunity%252Fhealthandsocialcare%252Fconditionsanddiseases%252Fbulletins%252Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%252F4august2022
IP

104.16.231.22:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

14517
Hash

a66a674c1922fe7b8b9ae81bfd01c873

4dacaa6f68bfd653d8dcb17130424024e7e6b4d2

0342e8810106e9e14210feb4a8447b4a3c607b8e45a9cf0415e78f400b859be7

HTTP Headers

                                        GET /visualisations/dvc2091/fig2/bottom/index.html?initialWidth=700&childId=bottom&parentTitle=Long%20COVID&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fvisualisations%2Fdvc2091%2Ffig2%2Findex.html%3FinitialWidth%3D700%26childId%3D1b3-47f0-a6a2-d6eb75712dff%26parentTitle%3DPrevalence%2520of%2520ongoing%2520symptoms%2520following%2520coronavirus%2520(COVID-19)%2520infection%2520in%2520the%2520UK%2520-%2520Office%2520for%2520National%2520Statistics%26parentUrl%3Dhttps%253A%252F%252Fwww.ons.gov.uk%252Fpeoplepopulationandcommunity%252Fhealthandsocialcare%252Fconditionsanddiseases%252Fbulletins%252Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%252F4august2022 HTTP/1.1
Host: www.ons.gov.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.ons.gov.uk/visualisations/dvc2091/fig2/index.html?initialWidth=700&childId=1b3-47f0-a6a2-d6eb75712dff&parentTitle=Prevalence%20of%20ongoing%20symptoms%20following%20coronavirus%20(COVID-19)%20infection%20in%20the%20UK%20-%20Office%20for%20National%20Statistics&parentUrl=https%3A%2F%2Fwww.ons.gov.uk%2Fpeoplepopulationandcommunity%2Fhealthandsocialcare%2Fconditionsanddiseases%2Fbulletins%2Fprevalenceofongoingsymptomsfollowingcoronaviruscovid19infectionintheuk%2F4august2022
Cookie: __cf_bm=rfi8gmnHIOxxPsCqc1SbkkG0eDCkJ.pNWZtjlvZtls8-1675111926-0-Adke9WGdN81B335RvHQIWxVnsR25rnOvtq0UD0QDhtafObk45Ot66cxudz6EU48Jiq8LrrQ/9xtxcJvJqDigaNQ=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
date: Mon, 30 Jan 2023 20:52:08 GMT
content-type: text/html;charset=utf-8
cache-control: public, max-age=14400
vary: Accept-Encoding, User-Agent
allow: DELETE, GET, HEAD, POST, PUT, OPTIONS, PATCH
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1
cf-cache-status: MISS
expires: Tue, 31 Jan 2023 00:52:08 GMT
server: cloudflare
cf-ray: 791d16ee387dfab8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

278

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

278
Hash

6e8c0d337429cc6facc91ba572f38f5f

bdb013a0430c04c3fa2e05fd10312160695255df

86eabd36a14a922c04e146d24fda423965ba9d244351aea737c3684d17fa8873

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4916
Cache-Control: max-age=109494
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 20:52:08 GMT
Etag: "63d7237b-116"
Expires: Wed, 01 Feb 2023 03:17:02 GMT
Last-Modified: Mon, 30 Jan 2023 01:55:07 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278

34.120.237.76

200 OK

4475

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

4475
Hash

4205d8106659e00fff1cbe9262918b8c

ab4f6528594a1725934727dc7d834c028a79c609

31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 05:47:49 GMT
age: 54259
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7679

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (19)

#1 JS:Script (size: 9224)

#2 JS:Script (size: 3363)

#3 JS:Script (size: 6947)

#4 JS:Script (size: 221957)

#5 JS:Script (size: 38751)

#6 JS:Script (size: 9058)

#7 JS:Script (size: 326258)

#8 JS:Script (size: 397)

#9 JS:Script (size: 445153)

#10 JS:Script (size: 755)

#11 JS:Script (size: 20336)

#12 JS:Script (size: 1359)

#13 JS:Script (size: 95)

#14 JS:Script (size: 9034)

#15 JS:Script (size: 1598)

#16 JS:Script (size: 152729)

#17 JS:Script (size: 3240)

#18 JS:Script (size: 212661)

#19 JS:Script (size: 20328)

HTTP Transactions (63)

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers