urlquery - report: 65.49.20.124/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
r3.o.lencr.org (5)	344	No data	No data	23.36.77.32
65.49.20.124 (4)	0	2020-08-25 13:00:47 UTC	2022-10-27 15:32:12 UTC	65.49.20.124	Unknown ranking
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-05 05:55:16 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	35.164.56.167
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76

Scan Date	Severity	Indicator	Comment
2022-11-05	2	65.49.20.124/	Malware
2022-11-05	2	65.49.20.124/logo-shadowserver.svg	Malware

Date	UQ / IDS / BL	URL	IP
2022-11-05 23:27:18 +0000	0 - 0 - 2	65.49.20.124/	65.49.20.124
2022-09-20 22:13:59 +0000	0 - 0 - 2	65.49.20.124/	65.49.20.124

Date	UQ / IDS / BL	URL	IP
2023-01-29 16:38:58 +0000	0 - 0 - 12	youngactorscamp.com/fido.zip	65.49.39.6
2023-01-29 16:38:19 +0000	0 - 0 - 12	youngactorscamp.com/fido.zip	65.49.39.6
2023-01-29 09:43:19 +0000	0 - 0 - 2	ogmowvcbbklo.in/	216.218.185.162
2023-01-29 05:54:18 +0000	0 - 0 - 2	qvvksmeemfgd.net/	216.218.185.162
2023-01-29 04:47:58 +0000	0 - 3 - 2	cyqcdkknmlmu.pw/	216.218.185.162

Date	UQ / IDS / BL	URL	IP
2022-11-05 23:27:18 +0000	0 - 0 - 2	65.49.20.124/	65.49.20.124
2022-09-20 22:13:59 +0000	0 - 0 - 2	65.49.20.124/	65.49.20.124

Date	UQ / IDS / BL	URL	IP
2022-11-06 02:22:19 +0000	0 - 0 - 2	184.105.247.243/	184.105.247.243
2022-11-05 13:25:24 +0000	0 - 0 - 2	65.49.20.107/	65.49.20.107
2022-10-25 22:20:10 +0000	0 - 0 - 2	65.49.20.121/	65.49.20.121
2022-10-25 22:19:51 +0000	0 - 0 - 2	74.82.47.50/	74.82.47.50
2022-10-24 22:32:59 +0000	0 - 0 - 2	65.49.20.110/	65.49.20.110

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 2da2fa0b2b86ccc4029d0baa4e9c5b21a6433228b84b451b72b1d318561d4ef2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "2DA2FA0B2B86CCC4029D0BAA4E9C5B21A6433228B84B451B72B1D318561D4EF2" Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12156 Expires: Sun, 06 Nov 2022 02:49:43 GMT Date: Sat, 05 Nov 2022 23:27:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8286265a56e3e10efd41b41618a54071 Sha1: 5f10ac9a050e15f5598674dc7ee3865b325d01a8 Sha256: 2da2fa0b2b86ccc4029d0baa4e9c5b21a6433228b84b451b72b1d318561d4ef2
GET / HTTP/1.1 Host: 65.49.20.124 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: 65.49.20.124/ FQDN: 65.49.20.124 IP: 65.49.20.124 HASH: 558dd8ef862c9b132df2cadf4c3548d0aacecabf4ae633f6adc0fa8947787621 65.49.20.124 HTTP/1.1 200 OK Content-Type: text/html Date: Sat, 05 Nov 2022 23:27:07 GMT Server: Apache/2.4.41 (Ubuntu) X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 01 Dec 2020 22:46:36 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip X-XSS-Protection: 1; mode=block Content-Length: 1153 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (451) Size: 1153 Md5: 13b91def9daa69af7ba4fb6bd8b2b1e9 Sha1: 1592295580ea98850c7d5b75f18f569648a8d510 Sha256: 558dd8ef862c9b132df2cadf4c3548d0aacecabf4ae633f6adc0fa8947787621 Alerts: Blocklists: - fortinet: Malware
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1396 Cache-Control: max-age=124033 Date: Sat, 05 Nov 2022 23:27:07 GMT Etag: "63662d58-1d7" Expires: Mon, 07 Nov 2022 09:54:20 GMT Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT Server: ECS (ska/F713) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 72c64df35304c35cd95e4ed6e101e795 Sha1: a39287987854d644a8da295da536fb31de8b44c1 Sha256: a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C" Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12038 Expires: Sun, 06 Nov 2022 02:47:45 GMT Date: Sat, 05 Nov 2022 23:27:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 078950c3ba9ad01927f3da494b1d1de4 Sha1: 443c8a8247e4e3e04c14d21e0227fc4e8f396142 Sha256: dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: YvN49xFCJdXKt8vsQkle/LxjI9GsKivLK2A0h3poHlW16eTiyRyDiSWOVl042xdhiTjDjEAmy/k= x-amz-request-id: K2JFARQ45SSENSHE content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sat, 05 Nov 2022 22:47:23 GMT age: 2384 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 67d5a988edcda47bc3b3b3f65d32b4b6 Sha1: d4f0e0da8b3690cc7da925026d3414b68c7d954f Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sat, 05 Nov 2022 23:27:07 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /style.css HTTP/1.1 Host: 65.49.20.124 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://65.49.20.124/	URL: 65.49.20.124/style.css FQDN: 65.49.20.124 IP: 65.49.20.124 HASH: f297ad4c0cac59713302776cb5c7ccf88a91121d99853496d32cd256cb3b7270 65.49.20.124 HTTP/1.1 200 OK Content-Type: text/css Date: Sat, 05 Nov 2022 23:27:07 GMT Server: Apache/2.4.41 (Ubuntu) X-Frame-Options: SAMEORIGIN Last-Modified: Tue, 21 Jul 2015 20:25:37 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip X-XSS-Protection: 1; mode=block Content-Length: 603 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text Size: 603 Md5: 3ab3e278fa86ac365cec2616b2e27e9a Sha1: 421ebda646bf0f329b5bb54b0d25f1554003851c Sha256: f297ad4c0cac59713302776cb5c7ccf88a91121d99853496d32cd256cb3b7270
GET /logo-shadowserver.svg HTTP/1.1 Host: 65.49.20.124 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://65.49.20.124/	URL: 65.49.20.124/logo-shadowserver.svg FQDN: 65.49.20.124 IP: 65.49.20.124 HASH: 13e80e538a780cafcff886941d165e26d6a8c3e4a5d087add149710311022e28 65.49.20.124 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Sat, 05 Nov 2022 23:27:07 GMT Server: Apache/2.4.41 (Ubuntu) X-Frame-Options: SAMEORIGIN Last-Modified: Thu, 18 Apr 2019 23:49:13 GMT Accept-Ranges: bytes Content-Length: 4421 X-XSS-Protection: 1; mode=block Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4421), with no line terminators Size: 4421 Md5: fb1d3112d94a854d31b7f26d7c4087b8 Sha1: 23bf3cc085c2befd7b58535e067722f3b5677948 Sha256: 13e80e538a780cafcff886941d165e26d6a8c3e4a5d087add149710311022e28 Alerts: Blocklists: - fortinet: Malware
GET /favicon.ico HTTP/1.1 Host: 65.49.20.124 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://65.49.20.124/	URL: 65.49.20.124/favicon.ico FQDN: 65.49.20.124 IP: 65.49.20.124 HASH: e6b12de7b84067d96a755ba977f28cb45d860918724f20ee0a3abae6e8e09770 65.49.20.124 HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Date: Sat, 05 Nov 2022 23:27:07 GMT Server: Apache/2.4.41 (Ubuntu) X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 29 Apr 2019 15:49:08 GMT Accept-Ranges: bytes Content-Length: 1150 X-XSS-Protection: 1; mode=block Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Size: 1150 Md5: 4ca6e285244f8c7d4fd336a4d414a9bd Sha1: f815a56a57aa8468abd3a5d9a8589a7391fe5992 Sha256: e6b12de7b84067d96a755ba977f28cb45d860918724f20ee0a3abae6e8e09770
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3867 Cache-Control: max-age=121446 Date: Sat, 05 Nov 2022 23:27:08 GMT Etag: "63661997-1d7" Expires: Mon, 07 Nov 2022 09:11:14 GMT Last-Modified: Sat, 05 Nov 2022 08:06:47 GMT Server: ECS (ska/F713) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: db63d54b77502dd6c7bdc792d4fd093e Sha1: 026ad8186833988279468829c004c6e2a2f2626f Sha256: eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: clZ9N0XdqB4phHVFemD+7g== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.164.56.167 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.164.56.167 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: Gk4mHxBh5fyNA4uzukCEWs0h41w= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12814 Expires: Sun, 06 Nov 2022 03:00:43 GMT Date: Sat, 05 Nov 2022 23:27:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f6ae0db60213bfddbf2ad71a9fb116bf Sha1: 915d2895adc3f022c28cc628aeb6e441cbb09d47 Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12814 Expires: Sun, 06 Nov 2022 03:00:43 GMT Date: Sat, 05 Nov 2022 23:27:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f6ae0db60213bfddbf2ad71a9fb116bf Sha1: 915d2895adc3f022c28cc628aeb6e441cbb09d47 Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12814 Expires: Sun, 06 Nov 2022 03:00:43 GMT Date: Sat, 05 Nov 2022 23:27:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f6ae0db60213bfddbf2ad71a9fb116bf Sha1: 915d2895adc3f022c28cc628aeb6e441cbb09d47 Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10462 x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: aMF6oEz_oAMF8Hg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0 x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: z6Lnru_eeTvRGdsz-q37-HGFgFfIT6fLSFcJBvT3oPjAPilszTWkDw== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google date: Sat, 05 Nov 2022 09:11:34 GMT age: 51335 etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10462 Md5: 4e2853cc6ec6223160471401e6871f4b Sha1: f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c Sha256: bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8961 x-amzn-requestid: 3a50374d-d90e-452e-bb89-82ca14c94b52 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bJarpGtqIAMFkPg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6366d7e3-55c356475fb64e6625a338c7;Sampled=0 x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:44 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: OR8zISm84Iz0FL3Km-aQOHSnjROX2-S_lKloAhMAThT17igEWRbxkA== via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google date: Sat, 05 Nov 2022 21:44:20 GMT age: 6169 etag: "1f727a7ea032082658944cf4041686446fb6b5f2" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8961 Md5: dcc79e66d1e21452efb26d26650f6739 Sha1: 1f727a7ea032082658944cf4041686446fb6b5f2 Sha256: af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7220419a-cf8c-4056-a522-11012e67cf32.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 005d0273b7fe7b68081d1db630df9444c4082140be87c34f3e9e5fb7db9a4160 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 14415 x-amzn-requestid: 9eadfbeb-38b2-483a-894a-375e00f646dd x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bJabgHcMoAMFTLg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6366d77c-104fa5e61c64aaf230ffb045;Sampled=0 x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: 1rzBJigxxARLwKhQ_2PvkVnWD2wUH9UPfyVKIe9lmvtmtMRwWjR21g== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google date: Sat, 05 Nov 2022 22:17:20 GMT etag: "276f1493d6da74c8fa3ef83dee77bf48850ff4b4" age: 4189 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 14415 Md5: fa77f05b1af971db287607d9d9a30e0f Sha1: 276f1493d6da74c8fa3ef83dee77bf48850ff4b4 Sha256: 005d0273b7fe7b68081d1db630df9444c4082140be87c34f3e9e5fb7db9a4160
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce7d7b50-094b-4310-b5b5-ea1e3416ac1b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: dc596ad450a27c2151d541125bf21258f38e209bbc3169ae497c367e3a8afc82 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5022 x-amzn-requestid: f77253a1-c0f8-4909-80f5-d6c1de52d42a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bJabaFxtoAMF10Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6366d77c-27570d6d5a6c2259017890e0;Sampled=0 x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT x-amz-cf-pop: YVR50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: KtbL4K1jSj39i86y5hlTeTGx0hfdmBdopkqrNdNBoH8Xqf_giFvMkA== via: 1.1 feda34dcbf6a00e232656b7983c2c7f0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google date: Sat, 05 Nov 2022 21:48:50 GMT age: 5899 etag: "14315b78c536168c93738009b01a1478e145021a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5022 Md5: 21a48fab41e721ac5122531d37b8a6bf Sha1: 14315b78c536168c93738009b01a1478e145021a Sha256: dc596ad450a27c2151d541125bf21258f38e209bbc3169ae497c367e3a8afc82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F148837ad-b0cd-4864-94a6-8a95f3af1c20.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e5abdd27c7c75a5bd55f88ad933eb4bbfa8c72887307ad2e0918b4216c347ec3 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8918 x-amzn-requestid: 05695d8b-6915-4647-98bf-a699f35ed25a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bJabcHDjoAMFyVw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6366d77c-71d6d6223d1e8e006a8e2593;Sampled=0 x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: yv9L2i0EF6xcmBLnn7Jp-_vCHog1TGZ4lh5K1nMrWfDz761n8xh-yQ== via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google date: Sat, 05 Nov 2022 21:46:01 GMT age: 6068 etag: "ba8a552ca0d40c6e879ba451ef95ae85aeabc1ce" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8918 Md5: 28381a10095fbc871cbd32f02e2c49be Sha1: ba8a552ca0d40c6e879ba451ef95ae85aeabc1ce Sha256: e5abdd27c7c75a5bd55f88ad933eb4bbfa8c72887307ad2e0918b4216c347ec3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F740ccc73-b923-49b5-a3cc-5e21146cee4a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 49876573e6da1a02a81290c16df77c169ca9aa50013a77f55bba67013a05ea57 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5862 x-amzn-requestid: 72cce604-5482-4007-8f77-44936d369a58 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bJb3jFBnoAMF1nQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6366d9c9-6870c2521f516af77b1812d1;Sampled=0 x-amzn-remapped-date: Sat, 05 Nov 2022 21:46:49 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: vZhY08BbuB8Y8xAEpftQmcManeKpHolwk5DaBiNjtW22wm7zdRnoJQ== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google date: Sat, 05 Nov 2022 22:00:56 GMT age: 5173 etag: "df1997af30af72547a31e0c7d8c587891606cc9a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5862 Md5: 425f4e7f6496e8ece483e05f40654687 Sha1: df1997af30af72547a31e0c7d8c587891606cc9a Sha256: 49876573e6da1a02a81290c16df77c169ca9aa50013a77f55bba67013a05ea57

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "2DA2FA0B2B86CCC4029D0BAA4E9C5B21A6433228B84B451B72B1D318561D4EF2" 

                                        
                                            
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12156 

                                        
                                            
Expires: Sun, 06 Nov 2022 02:49:43 GMT 

                                        
                                            
Date: Sat, 05 Nov 2022 23:27:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    8286265a56e3e10efd41b41618a54071

                                                Sha1:   5f10ac9a050e15f5598674dc7ee3865b325d01a8

                                                Sha256: 2da2fa0b2b86ccc4029d0baa4e9c5b21a6433228b84b451b72b1d318561d4ef2

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 1396 

                                        
                                            
Cache-Control: max-age=124033 

                                        
                                            
Date: Sat, 05 Nov 2022 23:27:07 GMT 

                                        
                                            
Etag: "63662d58-1d7" 

                                        
                                            
Expires: Mon, 07 Nov 2022 09:54:20 GMT 

                                        
                                            
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT 

                                        
                                            
Server: ECS (ska/F713) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    72c64df35304c35cd95e4ed6e101e795

                                                Sha1:   a39287987854d644a8da295da536fb31de8b44c1

                                                Sha256: a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: YvN49xFCJdXKt8vsQkle/LxjI9GsKivLK2A0h3poHlW16eTiyRyDiSWOVl042xdhiTjDjEAmy/k= 

                                        
                                            
x-amz-request-id: K2JFARQ45SSENSHE 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sat, 05 Nov 2022 22:47:23 GMT 

                                        
                                            
age: 2384 

                                        
                                            
last-modified: Fri, 30 Sep 2022 18:50:55 GMT 

                                        
                                            
etag: "67d5a988edcda47bc3b3b3f65d32b4b6" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    67d5a988edcda47bc3b3b3f65d32b4b6

                                                Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f

                                                Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

                                        
                                            GET /style.css HTTP/1.1 

                                        
                                            
Host: 65.49.20.124

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://65.49.20.124/

                                         65.49.20.124

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Sat, 05 Nov 2022 23:27:07 GMT 

                                        
                                            
Server: Apache/2.4.41 (Ubuntu) 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
Last-Modified: Tue, 21 Jul 2015 20:25:37 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
X-XSS-Protection: 1; mode=block 

                                        
                                            
Content-Length: 603 

                                        
                                            
Keep-Alive: timeout=5, max=100 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   603

                                                Md5:    3ab3e278fa86ac365cec2616b2e27e9a

                                                Sha1:   421ebda646bf0f329b5bb54b0d25f1554003851c

                                                Sha256: f297ad4c0cac59713302776cb5c7ccf88a91121d99853496d32cd256cb3b7270

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: 65.49.20.124

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://65.49.20.124/

                                         65.49.20.124

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/vnd.microsoft.icon

                                        

                                        
                                            
Date: Sat, 05 Nov 2022 23:27:07 GMT 

                                        
                                            
Server: Apache/2.4.41 (Ubuntu) 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
Last-Modified: Mon, 29 Apr 2019 15:49:08 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Content-Length: 1150 

                                        
                                            
X-XSS-Protection: 1; mode=block 

                                        
                                            
Keep-Alive: timeout=5, max=99 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data

                                                Size:   1150

                                                Md5:    4ca6e285244f8c7d4fd336a4d414a9bd

                                                Sha1:   f815a56a57aa8468abd3a5d9a8589a7391fe5992

                                                Sha256: e6b12de7b84067d96a755ba977f28cb45d860918724f20ee0a3abae6e8e09770

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: clZ9N0XdqB4phHVFemD+7g== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         35.164.56.167

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: Gk4mHxBh5fyNA4uzukCEWs0h41w= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" 

                                        
                                            
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12814 

                                        
                                            
Expires: Sun, 06 Nov 2022 03:00:43 GMT 

                                        
                                            
Date: Sat, 05 Nov 2022 23:27:09 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f6ae0db60213bfddbf2ad71a9fb116bf

                                                Sha1:   915d2895adc3f022c28cc628aeb6e441cbb09d47

                                                Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10462 

                                        
                                            
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: aMF6oEz_oAMF8Hg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: z6Lnru_eeTvRGdsz-q37-HGFgFfIT6fLSFcJBvT3oPjAPilszTWkDw== 

                                        
                                            
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 05 Nov 2022 09:11:34 GMT 

                                        
                                            
age: 51335 

                                        
                                            
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10462

                                                Md5:    4e2853cc6ec6223160471401e6871f4b

                                                Sha1:   f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c

                                                Sha256: bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7220419a-cf8c-4056-a522-11012e67cf32.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 14415 

                                        
                                            
x-amzn-requestid: 9eadfbeb-38b2-483a-894a-375e00f646dd 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bJabgHcMoAMFTLg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6366d77c-104fa5e61c64aaf230ffb045;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: 1rzBJigxxARLwKhQ_2PvkVnWD2wUH9UPfyVKIe9lmvtmtMRwWjR21g== 

                                        
                                            
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 05 Nov 2022 22:17:20 GMT 

                                        
                                            
etag: "276f1493d6da74c8fa3ef83dee77bf48850ff4b4" 

                                        
                                            
age: 4189 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   14415

                                                Md5:    fa77f05b1af971db287607d9d9a30e0f

                                                Sha1:   276f1493d6da74c8fa3ef83dee77bf48850ff4b4

                                                Sha256: 005d0273b7fe7b68081d1db630df9444c4082140be87c34f3e9e5fb7db9a4160

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F148837ad-b0cd-4864-94a6-8a95f3af1c20.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8918 

                                        
                                            
x-amzn-requestid: 05695d8b-6915-4647-98bf-a699f35ed25a 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bJabcHDjoAMFyVw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6366d77c-71d6d6223d1e8e006a8e2593;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: yv9L2i0EF6xcmBLnn7Jp-_vCHog1TGZ4lh5K1nMrWfDz761n8xh-yQ== 

                                        
                                            
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 05 Nov 2022 21:46:01 GMT 

                                        
                                            
age: 6068 

                                        
                                            
etag: "ba8a552ca0d40c6e879ba451ef95ae85aeabc1ce" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8918

                                                Md5:    28381a10095fbc871cbd32f02e2c49be

                                                Sha1:   ba8a552ca0d40c6e879ba451ef95ae85aeabc1ce

                                                Sha256: e5abdd27c7c75a5bd55f88ad933eb4bbfa8c72887307ad2e0918b4216c347ec3

URL	65.49.20.124/
IP	65.49.20.124 (United States)
ASN	#6939 HURRICANE
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-05 23:27:18 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	2
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (7)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 65.49.20.124

Last 5 reports on ASN: HURRICANE

Last 2 reports on domain: 65.49.20.124.

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (20)

Overview

Domain Summary (7)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 65.49.20.124

Last 5 reports on ASN: HURRICANE

Last 2 reports on domain: 65.49.20.124.

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (20)

Network Intrusion Detection Systems