Report - iamhr.ca/wp-mains/index.php?bxy=$YmlybGV5QGJlbGwubmV0

Report Overview

Submitted URL
iamhr.ca/wp-mains/index.php?bxy=$YmlybGV5QGJlbGwubmV0
IP
104.21.74.223
ASN
#13335 CLOUDFLARENET
Submitted
2022-10-07 00:23:20
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	54.230.111.35
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.sectigo.com	487	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	3.9 kB	104.18.32.68
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	736 B	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	54.148.148.62
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	52 kB	34.120.237.76
iamhr.ca	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.5 kB	184 kB	104.21.74.223
pfobellweb.hs.llnwd.net	918999	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.9 kB	123 kB	95.140.228.128

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-07	medium	iamhr.ca/wp-mains/index.php?bxy=$YmlybGV5QGJlbGwubmV0	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	iamhr.ca/wp-mains/index.php?bxy=$YmlybGV5QGJlbGwubmV0	33 B	2023-03-08	2023-04-02
Pretty URL iamhr.ca/wp-mains/index.php?bxy=$YmlybGV5QGJlbGwubmV0 IP 104.21.74.223 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 07:36:46 Last Seen2023-04-02 21:27:13 Times Seen2 Hash 668bc991f027b4d370bffc9b62d39895 1d20dc5b0ea1b76b8a7bf96badb8159f06ed53ee c1d368ef4d11ca2c54ac4193df42b8c3adfd55d94957a92171ace072956774f7 Loading...

HTTP Transactions (39)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4618
Expires: Fri, 07 Oct 2022 01:40:07 GMT
Date: Fri, 07 Oct 2022 00:23:09 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

54.230.111.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
54.230.111.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LHyRECUamwTdWD25PZqop_6qIsak2TAbgds6zYlEduLxDFqyzlRX_w==
Age: 117351

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4ab7d8709d334de0e46dcb86aabfbff1
f221138a8ad9d0bfa3c054370dcdb363a67dc310
b91d37f606eaf448b9c7dfc05566a11de004ce44503409e1a776288ee2622805

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B91D37F606EAF448B9C7DFC05566A11DE004CE44503409E1A776288EE2622805"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3071
Expires: Fri, 07 Oct 2022 01:14:20 GMT
Date: Fri, 07 Oct 2022 00:23:09 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: iVo7O4S4X0N7NPCu56cgH00SZjGNU8vbO3L8fdE9voRyapcZUPBcB9t/8SiaQG2SjIo87bxBabDUwpAUH4LhdA==
x-amz-request-id: W4QZWNYXXWF890DC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 23:30:58 GMT
age: 3131
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

iamhr.ca/wp-mains/index.php?bxy=$YmlybGV5QGJlbGwubmV0

104.21.74.223

200 OK

372 B

URL HTTP/1.1
iamhr.ca/wp-mains/index.php?bxy=$YmlybGV5QGJlbGwubmV0
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
372 B (372 bytes)
Hash
346750ff81fd1939c865613750f0fa59
ede09bb288a51c5ed8f428c66217cbcd5fba8622
55a36d22bf122a81d01c3aeb16f56e08728b48fd0c5852215e04f436a09f819c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wp-mains/index.php?bxy=$YmlybGV5QGJlbGwubmV0 HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tqAbU5gbDfvP9i%2FiSqrazma9wseHwJXEs3SMW2edeKXmok182NFWz8A7rw7nbFHpyESVGVmPAWzty8p3J3XKfKN%2B7qt5p7z0c7wLmRh%2FmNzIC5WCJDjo%2FDGBOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75627c8bda9a0b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 00:23:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

iamhr.ca/wp-mains/Tyfi9a79a9ui68/registrationFlow-login.css

104.21.74.223

200 OK

6.5 kB

URL HTTP/1.1
iamhr.ca/wp-mains/Tyfi9a79a9ui68/registrationFlow-login.css
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
6.5 kB (6512 bytes)
Hash
3c0ccba6ca49648d4271769c0e40babb
03db03e1c4a78a8d1582ec75b2b47a26ea000540
ae4bb723b17fda25bb6641df3f16d34c7954a3a62eb721ba257447b676e870f1

HTTP Headers

GET /wp-mains/Tyfi9a79a9ui68/registrationFlow-login.css HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Nov 2020 02:11:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2701
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NhJofnyCylQ0%2BiXPddiFygC9UOsBQqMPugjYMPJsv4UO7svqYFHv6jCo3zmOU%2FGl9NkB8H7NNAm7TD5%2FMwpS%2BP7uhdB5aa6Yc%2FxHbPjKYa0IhiMNA35mOCdEDw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c8f8fbb0b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/Tyfi9a79a9ui68/login-tracker-icon.min.css

104.21.74.223

200 OK

429 B

URL HTTP/1.1
iamhr.ca/wp-mains/Tyfi9a79a9ui68/login-tracker-icon.min.css
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (1302), with no line terminators
Size
429 B (429 bytes)
Hash
66a81828a5177bddb80d73b5fec6df1e
cc4aa6d07450d5aa7567fdddc038ae78595704ef
b38060370ab86a54e7fe07d9e5b17cec2ee4dae60e592a8967179a17e96561ae

HTTP Headers

GET /wp-mains/Tyfi9a79a9ui68/login-tracker-icon.min.css HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Nov 2020 02:11:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2701
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oukb%2BfMuliqhPO6aL7X2UhHUemDhb6lCASt1WuUtpSEqTtJWV627Iqv3RhjDxhgQDWH%2FAHDmQAUu3MBzr0vrf99eW%2Bax7KoglmxIFAz6I3WFFSTJsaCR7rnXxg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c8f8be0b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/Tyfi9a79a9ui68/bell(1).css

104.21.74.223

200 OK

967 B

URL HTTP/1.1
iamhr.ca/wp-mains/Tyfi9a79a9ui68/bell(1).css
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (4376), with no line terminators
Size
967 B (967 bytes)
Hash
dd3ea1fca7703ce39255a74d51e7fde2
73544e1fdcaf7d7ec8bfb1ec018a0c9573dfb7cc
bc55d4ed808f8a74f6e4895bc17f46c1eacff6344b6698a35108b115259c87aa

HTTP Headers

GET /wp-mains/Tyfi9a79a9ui68/bell(1).css HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Nov 2020 02:11:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2701
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r5Fw62wvxl1r%2Fzx31EF%2BAAPS52cptY7Bk3HubRk6gnJloseTqzFQdWyR1ZOYLPsuKP9axv%2FBcG0ErOIbMaSQKU6rY3WVCLTUFY5qpt5czw3JI4RxEngCw5cXoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c8f896f1bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/Tyfi9a79a9ui68/login-tracker.min.css

104.21.74.223

200 OK

2.9 kB

URL HTTP/1.1
iamhr.ca/wp-mains/Tyfi9a79a9ui68/login-tracker.min.css
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (11923), with no line terminators
Size
2.9 kB (2936 bytes)
Hash
946a7358d7266a9fc34c82907e7dbd00
80b6fc85ff80d313d2637cc124055c233f305b5b
56e1b7de4dd9bc53e59ec140372ea73a817e9622c6317e352faa1137a43cb58e

HTTP Headers

GET /wp-mains/Tyfi9a79a9ui68/login-tracker.min.css HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Nov 2020 02:11:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2701
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JvZ7Cwn59khsnEyX%2BafHetCYl02Kz2IBmNyG3miynfhANGB1Is6G8i32qJ2fBC2KlwvV1dgAS%2FMbTfaVZboK3PvGpSza5H56n%2Bjj7qr9CvQ4Wu21AX6XoSUjeg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c8f8c3bb52d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/Tyfi9a79a9ui68/fonts.css

104.21.74.223

200 OK

493 B

URL HTTP/1.1
iamhr.ca/wp-mains/Tyfi9a79a9ui68/fonts.css
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (397), with CRLF line terminators
Size
493 B (493 bytes)
Hash
0b0807cfff5193063fe9eb78590a7dce
ab4962f590d6941fa97f36a8c564eef49177ef0c
170ee8ec03f72be08ae6b182bb522d84b188cc875b9dba6792f0eba607c3b30d

HTTP Headers

GET /wp-mains/Tyfi9a79a9ui68/fonts.css HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Nov 2020 02:11:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2700
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ih1A7%2FuaSS9CXcHa5XcoFz4UXsDjfFvgyPhVKGDj%2F9MfnmVSHhhEaCIvZxpNIL8Xl5ipP75mQ8dGG2b4Jz%2BkHWUr9P87IUFc7mjnglScFFEEuMDOJ0exN6A4GQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c8f9becb509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/Tyfi9a79a9ui68/bell_custom_deprecatedbrowser_new.css

104.21.74.223

200 OK

481 B

URL HTTP/1.1
iamhr.ca/wp-mains/Tyfi9a79a9ui68/bell_custom_deprecatedbrowser_new.css
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
481 B (481 bytes)
Hash
44499ed325e672523b86ee81eff8a72d
d48cf37b504f6ed7299bbd656b7bd25d16ffa1b6
d19acfc08510e3b337b7b80d74525abbf38c69549ee5fab6ae1cee08296d5201

HTTP Headers

GET /wp-mains/Tyfi9a79a9ui68/bell_custom_deprecatedbrowser_new.css HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Nov 2020 02:11:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2700
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FFvR10ltbdW7kt84eTKSEDMI2%2B93SLaSXEqRhbxajSXCMj5GJ1KQ0AgtAvEQIJuwSWNvyQO%2BHAibpQqDK%2FxaX55p1td8eqwUhcvHQCgzIx8Ws74KcyF19hMN6A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c8f99761bfa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/Tyfi9a79a9ui68/bell(2).css

104.21.74.223

200 OK

37 kB

URL HTTP/1.1
iamhr.ca/wp-mains/Tyfi9a79a9ui68/bell(2).css
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (854), with CRLF line terminators
Size
37 kB (36776 bytes)
Hash
5d078e28653e5cde082385376a3248d1
dbcb63edd3344cd1f53f13a2c500b10b27ed9497
17fa9ee5efc4b5e7f953014bac7e14f7ddcec61d4bb088f08714f6d19089594e

HTTP Headers

GET /wp-mains/Tyfi9a79a9ui68/bell(2).css HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Nov 2020 02:11:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2701
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KG4k%2Fbas9SDN1VieMqwcnz67hnjhLWIa1koz8uFxBGnQ126DK8J265g62r08VJH1FxlzDX2t2gJdPi%2FSJDOUS98%2FZPQGa1%2BBs1anBTEgb6bpKD7c%2Fk8QNGc6xQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c8f9fd00b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/Tyfi9a79a9ui68/bell.css

104.21.74.223

200 OK

104 kB

URL HTTP/1.1
iamhr.ca/wp-mains/Tyfi9a79a9ui68/bell.css
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (540), with CRLF, LF line terminators
Size
104 kB (104109 bytes)
Hash
bcc1f74077ec6f211c0c0788031f16e6
ddc12d5b15d91192f6c1c99c13ef111ad5aab97f
1682e2bf9c6ff0521931e0c26ac8d6257486502e3512b1fcf2ef46a040a8ad11

HTTP Headers

GET /wp-mains/Tyfi9a79a9ui68/bell.css HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 Nov 2020 02:11:26 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2701
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IbXm1ds08CDS399dBF5pJyKHRRZZmCZI0j7JTc5PcxHhEfiycxImuvYsV05U4%2FQ%2FdfIFWnxFIP%2F20cBRyiQsVNbNLQlIR52R%2BzwBnVJZmBi%2B8akIJua%2FQuanUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c8f8e4cb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8

104.21.74.223

200 OK

5.6 kB

URL HTTP/1.1
iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1799), with CRLF line terminators
Size
5.6 kB (5592 bytes)
Hash
277bbdd950dc4ac9a646c0c5366fdd9b
6c75054058365ebefa817054a8547635bdbcfd2b
2674f687f8a9b50f02c9da2c4edc902972c0c600953c6880e2a6f69bf0c1c6a6

HTTP Headers

GET /wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8 HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: drake=dexter
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814; path=/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KYmzVg%2BEW8WmzOpMZh87Z2UVkDd8PWNorWsNy6TqUsNuvbyGfGknqrkhzJA3vrUVnkLEIA1t3Cb4USHIWzpDAcTPgR%2Be%2FsZDy0NihALjvCZePxM7qvQXJp8VcA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75627c8e5b910b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/f2a.png

104.21.74.223

200 OK

4.1 kB

URL HTTP/1.1
iamhr.ca/wp-mains/f2a.png
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 196 x 196, 8-bit colormap, non-interlaced\012- data
Size
4.1 kB (4064 bytes)
Hash
f98ba05492deabb181da961131fd1853
3f78552874af3911e47385b684456ed1f61ff3bd
8b9db0163e82742adf34942363cb11891e285399bac01fcc48beeccf8a752f61

HTTP Headers

GET /wp-mains/f2a.png HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: image/png
Content-Length: 4064
Connection: keep-alive
Last-Modified: Sat, 05 Dec 2020 03:52:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2700
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i3G9BNNSCgptWZGPdnas3hULhdeagaZWVYjAEfHp3s8CgRKEixbLbem%2BzKF%2B8K5y2B6zrcfCyJyt18MCGh0muwkioT6vZ7TxI7nLLvh8iY2Uijqmmt5mj0JwCw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c903e95b527-OSL
alt-svc: h2=":443"; ma=60

iamhr.ca/wp-mains/fb.ico

104.21.74.223

200 OK

13 kB

URL HTTP/1.1
iamhr.ca/wp-mains/fb.ico
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type
MS Windows icon resource - 5 icons, 32x32, 8 bits/pixel, 48x48, 8 bits/pixel\012- data
Size
13 kB (12830 bytes)
Hash
742b90bac764e11b7d1aa0d1ac4ced8f
ffbfa3d3c131aceb87cb8a044eb0e64706926dec
ee91d57bdb06906e1fc11b67e09f47ded9c85cb3c666ddbb14d68e8a5ea51463

HTTP Headers

GET /wp-mains/fb.ico HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: drake=dexter; PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 05 Dec 2020 03:52:00 GMT
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2700
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vy9affkddEhPg73Tdaaz8vzcgTgOjoLUPAztBFumI7avr1zJdQuKaqxa7gxUCIg4Hml9OXhD7UlKBrU%2F0VdjVZeNObQN9ouzemkCy%2F5i0hdqdZJLATn%2Fqh8nTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c9038590b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

54.230.111.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
54.230.111.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 23:29:41 GMT
Expires: Thu, 06 Oct 2022 23:58:46 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9Cte2TyCMyZIwaHJXsMZIkbNvaV1iYX3BDe2KFnZ6vxGc6LhoknZ4A==
Age: 3209

ocsp.sectigo.com/

104.18.32.68

200 OK

472 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
e5bb9d3f1f82ae9b9b0ef0067f41984c
0448409c8f6b0359d03b547e8fad3cbf5a0159cb
54692635c6750a4fdde552a2a395d8187ebf2ef51c5e0f1b28ade57686f19810

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 14:15:16 GMT
Expires: Mon, 10 Oct 2022 14:15:15 GMT
Etag: "0448409c8f6b0359d03b547e8fad3cbf5a0159cb"
Cache-Control: max-age=308524,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75627c913b60b503-OSL

ocsp.sectigo.com/

104.18.32.68

200 OK

472 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
e5bb9d3f1f82ae9b9b0ef0067f41984c
0448409c8f6b0359d03b547e8fad3cbf5a0159cb
54692635c6750a4fdde552a2a395d8187ebf2ef51c5e0f1b28ade57686f19810

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 14:15:16 GMT
Expires: Mon, 10 Oct 2022 14:15:15 GMT
Etag: "0448409c8f6b0359d03b547e8fad3cbf5a0159cb"
Cache-Control: max-age=308524,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75627c913daeb512-OSL

pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_semibold-webfont.woff2?ver=00000000

95.140.228.128

200 OK

19 kB

URL HTTP/1.1
pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_semibold-webfont.woff2?ver=00000000
IP
95.140.228.128:0
ASN
#22822 LLNW

File type
Web Open Font Format (Version 2), TrueType, length 19348, version 1.0\012- data
Size
19 kB (19348 bytes)
Hash
cbcd6bfdb582f21405f7a8c62fb942ea
0360ad3f8fbf83bd89c6495f3c83dd957b382bad
41407c31a0d44bb952744a390decccd0a4ba5918e4ff89c860f2495d5ee7a7fe

HTTP Headers

GET /styles/RSX/framework/css/fonts/bellslim_semibold-webfont.woff2?ver=00000000 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://iamhr.ca
Connection: keep-alive
Referer: http://iamhr.ca/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: application/octet-stream
Content-Length: 19348
Connection: keep-alive
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
X-Generated-By: O-9X-T06
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=16070400
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors  oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca  *.virginmobile.ca  *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca
X-Content-Type-Options: nosniff
X-LLID: 2565b4fe57245e2760d924e9b3879efa
Age: 54760
Last-Modified: Sun, 19 Jan 2020 06:54:19 GMT
Expires: Fri, 07 Oct 2022 09:10:30 GMT

pfobellweb.hs.llnwd.net/Styles/BRF2/Master/core/fonts/bell-icon.woff?ver=201910200707

95.140.228.128

200 OK

60 kB

URL HTTP/1.1
pfobellweb.hs.llnwd.net/Styles/BRF2/Master/core/fonts/bell-icon.woff?ver=201910200707
IP
95.140.228.128:0
ASN
#22822 LLNW

File type
Web Open Font Format, TrueType, length 60340, version 1.0\012- data
Size
60 kB (60340 bytes)
Hash
0e093e4733463d05b96639912a048d7f
359e27a3f01c41c02b6b08a98bf8ce620d1515e8
bea03e289208b0ca394d3ed7ddf39f8be8f1570808fbc70055717770b7dab181

HTTP Headers

GET /Styles/BRF2/Master/core/fonts/bell-icon.woff?ver=201910200707 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://iamhr.ca
Connection: keep-alive
Referer: http://iamhr.ca/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: application/octet-stream
Content-Length: 60340
Connection: keep-alive
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=16070400
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca *.virginmobile.ca *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca *.luckymobile.ca *.virginplus.ca; script-src https://*.luckymobile.ca https://www.googletagmanager.com https://sc-static.net https://assets.adobedtm.com https://*.google-analytics.com https://*.postescanada-canadapost.ca https://*.digital.nuance.com https://*.inq.com https://connect.facebook.net https://static.ads-twitter.com https://*.twitter.com https://ssl.geoplugin.net https://s.pinimg.com https://*.google.com https://*.gstatic.com https://*.vmobile.ca https://*.googleadservices.com https://*.stackadapt.com https://*.doubleclick.net https://*.virginplus.ca https://*.bell.ca https://*.tiktok.com https://*.know-where.com https://*.korem.com https://*.googleapis.com https://*.coveo.com https://siteimproveanalytics.com https://*.licdn.com https://vldbellsup.hs.llnwd.net https://vfobellsup.hs.llnwd.net https://prdbellsup.hs.llnwd.net https://pfobellsup.hs.llnwd.net https://cdnjs.cloudflare.com https://vldbellweb.hs.llnwd.net https://vfobellweb.hs.llnwd.net https://prdbellweb.hs.llnwd.net https://pfobellweb.hs.llnwd.net https://*.medallia.ca https://*.kampyle.com https://*.decibelinsight.net  https://*.decibelinsight.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'
X-Content-Type-Options: nosniff
X-LLID: 90c1bf3dee06878c2fa4b862b37abacb
Age: 36170
Last-Modified: Wed, 23 Feb 2022 01:49:45 GMT
Expires: Fri, 07 Oct 2022 14:20:20 GMT

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
8be5570b9a5ca76c580da007a824b029
38840f2ac6476bdd5608121c5653e338c7ad9715
0b94e05080ef85432b1815eb3c6c7594c9613cfde1b51eeabee46d0d9fde64b2

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 951
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 00:23:10 GMT
Last-Modified: Fri, 07 Oct 2022 00:07:19 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

ocsp.sectigo.com/

104.18.32.68

200 OK

472 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
e5bb9d3f1f82ae9b9b0ef0067f41984c
0448409c8f6b0359d03b547e8fad3cbf5a0159cb
54692635c6750a4fdde552a2a395d8187ebf2ef51c5e0f1b28ade57686f19810

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 14:15:16 GMT
Expires: Mon, 10 Oct 2022 14:15:15 GMT
Etag: "0448409c8f6b0359d03b547e8fad3cbf5a0159cb"
Cache-Control: max-age=308524,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75627c9139640b51-OSL

ocsp.sectigo.com/

104.18.32.68

200 OK

472 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
e5bb9d3f1f82ae9b9b0ef0067f41984c
0448409c8f6b0359d03b547e8fad3cbf5a0159cb
54692635c6750a4fdde552a2a395d8187ebf2ef51c5e0f1b28ade57686f19810

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 14:15:16 GMT
Expires: Mon, 10 Oct 2022 14:15:15 GMT
Etag: "0448409c8f6b0359d03b547e8fad3cbf5a0159cb"
Cache-Control: max-age=308524,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75627c913d1cb4ee-OSL

pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_regular-webfont.woff2?ver=00000000

95.140.228.128

200 OK

19 kB

URL HTTP/1.1
pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_regular-webfont.woff2?ver=00000000
IP
95.140.228.128:0
ASN
#22822 LLNW

File type
Web Open Font Format (Version 2), TrueType, length 19412, version 1.0\012- data
Size
19 kB (19412 bytes)
Hash
dc0a99b10362b5e020067080e04dc409
312c96ef72bb892f3ee196b6d05ffee2f0553bbe
3e4d8f00673f6a80b26a8565f9931374e1e9171553b078261a67772af7511629

HTTP Headers

GET /styles/RSX/framework/css/fonts/bellslim_regular-webfont.woff2?ver=00000000 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://iamhr.ca
Connection: keep-alive
Referer: http://iamhr.ca/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: application/octet-stream
Content-Length: 19412
Connection: keep-alive
Cache-Control: public, max-age=86400
Accept-Ranges: bytes
X-Generated-By: O-9X-T07
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=16070400
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors  oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca  *.virginmobile.ca  *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca
X-Content-Type-Options: nosniff
X-LLID: fd464c7df4851dbf6b07eeef4c3c21a6
Age: 54534
Last-Modified: Sun, 19 Jan 2020 06:54:19 GMT
Expires: Fri, 07 Oct 2022 09:14:16 GMT

pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_medium-webfont.woff2?ver=00000000

95.140.228.128

200 OK

20 kB

URL HTTP/1.1
pfobellweb.hs.llnwd.net/styles/RSX/framework/css/fonts/bellslim_medium-webfont.woff2?ver=00000000
IP
95.140.228.128:0
ASN
#22822 LLNW

File type
Web Open Font Format (Version 2), TrueType, length 19880, version 1.0\012- data
Size
20 kB (19880 bytes)
Hash
c3d987cf1cfdf2ad3d83a05a1ad8dd56
f64db451fac03f18ddd6ade18e713faa91b8e572
e36f3860d6fe12df58872c55cf1fb78b7a3fe86d9a27591bfda5d8ceb34a31f3

HTTP Headers

GET /styles/RSX/framework/css/fonts/bellslim_medium-webfont.woff2?ver=00000000 HTTP/1.1
Host: pfobellweb.hs.llnwd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://iamhr.ca
Connection: keep-alive
Referer: http://iamhr.ca/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: application/font-woff2
Content-Length: 19880
Connection: keep-alive
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=16070400
X-XSS-Protection: 1
Content-Security-Policy: frame-ancestors  oneview.bell.ca bell.ca *.bell.ca *.bellmts.ca  *.virginmobile.ca  *.vm.ca *.vmobile.ca *.vmcanada.com *.thesource.ca
X-Content-Type-Options: nosniff
X-LLID: d58624f3e569b8a634b5c6352e0c65b6
Age: 54760
Last-Modified: Sun, 19 Jan 2020 06:54:19 GMT
Expires: Fri, 07 Oct 2022 09:10:30 GMT

push.services.mozilla.com/

54.148.148.62

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.148.148.62:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cM4SgqFZOO59jcTce0LWXQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gLuC0zOZw1qFLXuctYW1LoVsBsE=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4600
Expires: Fri, 07 Oct 2022 01:39:51 GMT
Date: Fri, 07 Oct 2022 00:23:11 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4600
Expires: Fri, 07 Oct 2022 01:39:51 GMT
Date: Fri, 07 Oct 2022 00:23:11 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4600
Expires: Fri, 07 Oct 2022 01:39:51 GMT
Date: Fri, 07 Oct 2022 00:23:11 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
31e440ccd993c4ee793f50511c2ac7c4
4380327d50b7001d158aee05a57c6078e57c94e4
65d8a97f6df1e110333a01d1f6dcb4982db7bb4b1c5f3f1498fafa716e250c0f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "65D8A97F6DF1E110333A01D1F6DCB4982DB7BB4B1C5F3F1498FAFA716E250C0F"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4600
Expires: Fri, 07 Oct 2022 01:39:51 GMT
Date: Fri, 07 Oct 2022 00:23:11 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg

34.120.237.76

200 OK

8.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.1 kB (8050 bytes)
Hash
0611d96a8a76ee2b104a70372860f979
579dea2edcf3f3fa3e18530d1f254132589a2f6b
70996e9eb0aac2a5befff12fd63c57c5120f59e061af60b60c975694307a6be3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8050
x-amzn-requestid: 7332406c-4a06-4c0d-a4c3-d59e089b511d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJw3jHaooAMF6bQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333c830-4513d4852dc064a812c23cea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 04:06:08 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ytF_TxhiRg0wYUJod7-t0FEv_p7EkIXJNe2rygTGxW6TnebbTy8DCw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:18:59 GMT
age: 7452
etag: "579dea2edcf3f3fa3e18530d1f254132589a2f6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10987 bytes)
Hash
53b7ffdc3799e0ac7a225145242579ef
c47f0525fe5354ee13fe63c0ec31f0f826a58005
4bb518afc9b3e7bfb976d343e46b306155834adbe71fa35b0d6f509959f78aca

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10987
x-amzn-requestid: c2ab1012-1afd-4d74-8114-97977b43da24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZgCHwGdGoAMFvyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cb097-3237927a0c1e081d22c902f7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 22:15:51 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: JYDg0-KelCPr__4bKtpARLrwiE1CHGICcFI6I9_TFCMcmESbykNhXQ==
via: 1.1 3dde68f1f52282c9e1ee336d97233b0a.cloudfront.net (CloudFront), 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:50 GMT
age: 8061
etag: "c47f0525fe5354ee13fe63c0ec31f0f826a58005"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

2.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36097bf9-dd7a-4dde-af42-0e23e000e84a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
2.7 kB (2732 bytes)
Hash
e9646987c0395eec23e32dc00954d386
5545b691aeefcd31bbc6b6cad6726234773e9d74
900a2bfbe3984db79056d38764b1986399d827a7f54d1c54d4fd3b06c7981385

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36097bf9-dd7a-4dde-af42-0e23e000e84a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 2732
x-amzn-requestid: 004a85ab-b33b-4b7f-86f2-9762e6cd2f0b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmhkQGWgoAMF7mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f494e-473458094dc2ded55a681505;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: ysTc0JMPXFSGOerDvx1CP3eCOsWV3CjIeA4MxV9axtUnlRLjUHbiOQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:57:17 GMT
age: 8754
etag: "5545b691aeefcd31bbc6b6cad6726234773e9d74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd58f1191-b279-4341-98b0-b5853ac04100.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8351 bytes)
Hash
90f323a3b73cab85abdce9b6631e8d93
36e42d12a193c90fbc03a7d13a1711f24bf6f2a2
259aecd4212d5c91c4eeb930d99e28ce420af50d987e93d99974f6db1127ff28

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd58f1191-b279-4341-98b0-b5853ac04100.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 8e8e58e6-a6d5-41ef-8246-bb276b882852
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmihYGo2oAMFXYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4ad5-06b81112046a7b2b3b898a3d;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:38:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: kctKeNa9LqP47hiCMEj7tkJFZVjgLi0LEJD_gGsCTjJ5lF4RC-UvHA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:07:00 GMT
age: 8171
etag: "36e42d12a193c90fbc03a7d13a1711f24bf6f2a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff362ea4b-2913-4401-9322-7a70f223e2a9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9160 bytes)
Hash
5cf80f9e9e5aabf650c561b5939acf1c
6a66ddb2c8c77cbd27101b8705a34492aa998b98
9aff5e0564805bbf83edb94b2d0462f76e09b5b67a39f3ab65aee66a24a192da

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff362ea4b-2913-4401-9322-7a70f223e2a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9160
x-amzn-requestid: 3064ca86-5e0e-4bff-ad0c-6dcce9fa1404
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmhkaGIGoAMFZzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f494f-06a55ad9421678605d12a4a6;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: Z1h24jWWAxKjkhNTNvBshIHgrs2siyiVKQcWNn9t3ah1q94IZLwQmg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:50 GMT
age: 8061
etag: "6a66ddb2c8c77cbd27101b8705a34492aa998b98"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F837dece8-fc6a-4543-a1b5-e8504c153d81.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.1 kB (6063 bytes)
Hash
a4d23ef36836d4691f44e51885513cc3
10fc52375fd8946bfd468eb96e4aaf592c239663
fb3d2d52e1dbbe4225c3df920b36eeb73dc52a1010db52018bc1eb5c5bfbd028

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F837dece8-fc6a-4543-a1b5-e8504c153d81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6063
x-amzn-requestid: e4067d2e-5fe8-4c80-ab2c-15e98605d458
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZQw32GbTIAMFx0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633694fe-5d650b9433007db41ea51a35;Sampled=0
x-amzn-remapped-date: Fri, 30 Sep 2022 07:04:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2wjeYIJI3CvuYekDHLaGl_50UC4Vy85egggJIQK6Gd7sVAgVY-82uA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:53:07 GMT
age: 5404
etag: "10fc52375fd8946bfd468eb96e4aaf592c239663"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

iamhr.ca/Styles/images/upds.jpg

104.21.74.223

404 Not Found

0 B

URL HTTP/1.1
iamhr.ca/Styles/images/upds.jpg
IP
104.21.74.223:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Styles/images/upds.jpg HTTP/1.1
Host: iamhr.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iamhr.ca/wp-mains/D288ert15675c8ya.php?bxy=$YmlybGV5QGJlbGwubmV0&4ec3f5133574508a5951789d552f42bde96d59d4cd31ee203da801c2f6e9517fb67bc30aa90462dab2ea860691f8930fcbe4d1ae3b212706a3205a4da8775fbce67e1bd8744e8d607cc3cdf821cabef31957c40984108396f6c8
Cookie: PHPSESSID=45aaf6a06fee8a8fa7081b8d4be52814

HTTP/1.1 404 Not Found
Date: Fri, 07 Oct 2022 00:23:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: max-age=14400, must-revalidate
Link: <http://iamhr.ca/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ijhq7Wqis0Uj%2BWVPR3WBry6ByAIYfJTXwUDi%2B9jutYTIq8nDU0ae95Iu4l7OaKHuhm2wf4jxaft8zS2EEwum3Y2glRX7UHJf50CGsGByMVGapAlfpXBxFp7kZg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75627c907eaeb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (39)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type