urlquery - report: candapizza.net/

Passive DNS Source	Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
[Mnemonic Passive DNS]	firefox.settings.services.mozilla.com (2)	867	2016-03-17 08:25:01 UTC	2020-05-25 20:01:47 UTC	54.230.111.7
[Mnemonic Passive DNS]	content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-07-02 05:33:42 UTC	54.230.111.64
[Mnemonic Passive DNS]	contile.services.mozilla.com (1)	1114	No data	No data	34.117.237.239
[Mnemonic Passive DNS]	ocsp.digicert.com (1)	86	2012-11-29 12:49:49 UTC	2022-07-02 21:26:17 UTC	93.184.220.29
[Mnemonic Passive DNS]	candapizza.net (2)	0	No data	No data	45.33.20.235	Unknown ranking
[Mnemonic Passive DNS]	r3.o.lencr.org (3)	344	2020-12-02 08:52:13 UTC	2022-07-02 05:03:49 UTC	23.36.76.226
[Mnemonic Passive DNS]	push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2022-07-02 06:56:22 UTC	35.81.71.18
[Mnemonic Passive DNS]	img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-07-02 15:26:32 UTC	34.120.237.76
[Mnemonic Passive DNS]	js-agent.newrelic.com (1)	378	2017-01-30 05:00:15 UTC	2022-07-02 05:25:24 UTC	151.101.86.137
[Mnemonic Passive DNS]	bam.nr-data.net (1)	630	2022-05-18 16:30:58 UTC	2022-07-02 05:16:01 UTC	162.247.241.14

Date	UQ / IDS / BL	URL	IP
2022-08-09 09:23:16 +0000	0 - 0 - 3	zappmedia.cm/mtm/direct/.ejxdikeowjambp_iy4lq (...)	198.58.118.167
2022-08-09 07:39:58 +0000	0 - 0 - 2	icqp.com/mtm/direct/.eJxdydEKwjAMheF3yeUsi5c6 (...)	198.58.118.167
2022-08-09 01:04:54 +0000	0 - 0 - 1	absoluteradioco.uk/mtm/direct/.eJxtikEOAiEMRe (...)	198.58.118.167
2022-08-08 22:56:43 +0000	0 - 0 - 2	ww1.originalsweetscalgary.com/	198.58.118.167
2022-08-08 16:46:18 +0000	0 - 0 - 2	familyeyemdhealthepayment.com/mtm/direct/.eJy (...)	198.58.118.167
2022-08-08 15:52:16 +0000	0 - 0 - 2	recruttapp.in/http:/recruttapp.in/mtm/direct/ (...)	198.58.118.167
2022-08-08 11:59:50 +0000	0 - 0 - 1	wildswiming.co.uk/mtm/direct/.eJxtiksOwjAMBe_ (...)	198.58.118.167
2022-08-08 09:23:08 +0000	0 - 0 - 3	cleancarscall.com/	198.58.118.167
2022-08-08 08:34:12 +0000	0 - 0 - 3	www.masterconnect.com/	198.58.118.167
2022-08-08 05:15:12 +0000	0 - 0 - 3	visitsfunk.com/9a/4b/e2	198.58.118.167

Date	UQ / IDS / BL	URL	IP
2022-08-09 11:23:44 +0000	0 - 0 - 2	lovergirl.com/	45.33.18.44
2022-08-09 11:14:54 +0000	0 - 0 - 4	getme.co.nz/mtb/login.php	45.79.238.21
2022-08-09 10:56:45 +0000	0 - 0 - 3	tinybreasts.com/	45.33.18.44
2022-08-09 10:03:13 +0000	0 - 0 - 2	www.chawkyfrenn.com/icon/JtT/	50.116.62.25
2022-08-09 10:02:56 +0000	0 - 0 - 2	icket.com/http:/icket.com/mtm/direct/.eJw9kEt (...)	173.255.194.134
2022-08-09 09:45:24 +0000	0 - 0 - 1	cumfixation.com/mtm/direct/.eJxlikEOwjAMBP_iY (...)	45.33.23.183
2022-08-09 09:39:55 +0000	0 - 0 - 2	whitepanties.net/	173.255.194.134
2022-08-09 09:23:16 +0000	0 - 0 - 3	zappmedia.cm/mtm/direct/.ejxdikeowjambp_iy4lq (...)	198.58.118.167
2022-08-09 09:23:10 +0000	0 - 0 - 3	vestafscareers.com/mtm/direct/.ejxtikekajemre (...)	173.255.194.134
2022-08-09 09:19:27 +0000	0 - 0 - 3	supermerc.com/mtm/direct/.ejxdikeowjambp_iy4l (...)	45.33.2.79

Date	UQ / IDS / BL	URL	IP
2022-07-23 03:38:10 +0000	0 - 0 - 1	candapizza.net/mtm/direct/.eJxlikEOwjAMBP_iY4 (...)	45.56.79.23
2022-07-10 07:51:43 +0000	0 - 0 - 1	candapizza.net/mtm/direct/.eJxlikEOwjAMBP_iY4 (...)	45.56.79.23

Request	Response
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 91dd975a7b17b2922dd23c0e49314e40$ 54.230.111.7 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Sun, 03 Jul 2022 00:51:31 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: YDG0-vYSyCUsS6_AYGZx0gpHW3Y-jcqmbkut0oywWECMFvQDpsAxhQ== Age: 3551 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 91dd975a7b17b2922dd23c0e49314e40 Sha1: 57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2 Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "8E263E6763753F5659AC0FC2D11DAF8ECE9720988153C38CB40631AF26C86575" Last-Modified: Fri, 01 Jul 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2211 Expires: Sun, 03 Jul 2022 02:27:34 GMT Date: Sun, 03 Jul 2022 01:50:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a7e37e80f3a67a41ff567648c1f2d285 Sha1: 7ce66e5153f2d4a7b14ccba49fd1a4b70ae274f5 Sha256: 8e263e6763753f5659ac0fc2d11daf8ece9720988153c38cb40631af26c86575
GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	$Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 581454acdd98f34fd3fbabd0977ade29$ 54.230.111.64 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Tue, 21 Jun 2022 12:10:22 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Sat, 02 Jul 2022 03:26:42 GMT etag: "581454acdd98f34fd3fbabd0977ade29" x-cache: Hit from cloudfront via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: dI0_RFW7Y3Gv7b5nvF8p4ewS4JbgtS9Hh5gQPAcPphWDU6LmeewWEQ== age: 80642 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 581454acdd98f34fd3fbabd0977ade29 Sha1: d8d86c0b513137aeb85de01cea7b272c35eb6ab4 Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6$ 34.117.237.239 HTTP/2 200 OK server: nginx date: Sun, 03 Jul 2022 01:50:43 GMT content-type: application/json content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243$ 54.230.111.7 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Date: Sun, 03 Jul 2022 01:38:48 GMT Cache-Control: max-age=3600 Expires: Sun, 03 Jul 2022 01:51:08 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: gEN4WMoOB3rjq2J7lgQU_AYi3GMxKADT3Qg_JxQzXPASne-DpFxPzA== Age: 715 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4169 Cache-Control: 'max-age=158059' Date: Sun, 03 Jul 2022 01:50:44 GMT Last-Modified: Sun, 03 Jul 2022 00:41:15 GMT Server: ECS (ska/F71D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 1bbeee0af8ba2baaa7ba2cfd41d985fe Sha1: b8ebc12a31a06bb371e40a11190af4a51efa169d Sha256: 12f4813aabd9a8839077cfa09cf1115f357f7772d4544ecad4be03f1d13fee1c
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: S688+Jduejq+Bfpph7veIA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	35.81.71.18 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: N17HCtdrrMh4TTJvJF8/Nhvwo0w= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "ED6C6F73611FB56DFA41FD028E23F0BC0470D319E51B212B8078C2C0DF8F4638" Last-Modified: Fri, 01 Jul 2022 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2228 Expires: Sun, 03 Jul 2022 02:27:53 GMT Date: Sun, 03 Jul 2022 01:50:45 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 58ddda9bd3e53e01306c6a03b89b13c9 Sha1: 617798858ee1e2abf3267917c977cd743294db2e Sha256: ed6c6f73611fb56dfa41fd028e23f0bc0470d319e51b212b8078c2c0df8f4638
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "ED6C6F73611FB56DFA41FD028E23F0BC0470D319E51B212B8078C2C0DF8F4638" Last-Modified: Fri, 01 Jul 2022 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2228 Expires: Sun, 03 Jul 2022 02:27:53 GMT Date: Sun, 03 Jul 2022 01:50:45 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 58ddda9bd3e53e01306c6a03b89b13c9 Sha1: 617798858ee1e2abf3267917c977cd743294db2e Sha256: ed6c6f73611fb56dfa41fd028e23f0bc0470d319e51b212b8078c2c0df8f4638
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cb347ee-0c4f-4d7e-90eb-825700af70fe.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7995 Md5: d94eb6b81fe4c6cb23f6e1f7c728b206$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 7995 x-amzn-requestid: f02ff2f1-fd33-480c-a23b-75bfddabb80f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Ug-akGD8IAMFr1g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62bd1110-7d10a17c73f549ae3848a2cb;Sampled=0 x-amzn-remapped-date: Thu, 30 Jun 2022 02:57:20 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: 42_3nLjk5uXqol57MjM39urQcP0vCS3PdiivHGutCmarFg-NAd3_dg== via: 1.1 c4f3ed9d980b0f0938aa71b835d9bf96.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google date: Sun, 03 Jul 2022 00:44:20 GMT age: 3985 etag: "e38509d2638ca376736aa30e675332c9627cdce7" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7995 Md5: d94eb6b81fe4c6cb23f6e1f7c728b206 Sha1: e38509d2638ca376736aa30e675332c9627cdce7 Sha256: ee55eaf774c152a21a446b9e44c5971d72f6a55a14c46b1bab768479597b3d44
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ea1212f-c856-478b-8478-e81dd7306820.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10143 Md5: eebebd88b9e7ba3d94e19e6a20be4fd5$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 10143 x-amzn-requestid: 7b198982-763e-427b-9abb-2d533f346821 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UaZt7HBnIAMFtOA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62ba6ff2-30284cbe4fa5a0906070335e;Sampled=0 x-amzn-remapped-date: Tue, 28 Jun 2022 03:05:22 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: lTKF2-OdgSohMRk07yAFIDTy8eaebXdLG3Yjwp1h6tEuWANw9ZmYHg== via: 1.1 f94de31c777bc3bf7b8976bac21b4482.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google date: Sat, 02 Jul 2022 13:49:14 GMT age: 43291 etag: "e64381fdfedbede9788ae6b82affd78ceaf56284" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10143 Md5: eebebd88b9e7ba3d94e19e6a20be4fd5 Sha1: e64381fdfedbede9788ae6b82affd78ceaf56284 Sha256: 9a7950214124312b6f80394ea72d0f29773d11f223173c1343c9669e3723247b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F431f287f-9907-47aa-be38-0ff4e6db75fc.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8553 Md5: e6f97e6b64100081e8bed56216564854$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 8553 x-amzn-requestid: af8b913f-5eac-4e16-9afa-42b22b9fd6ef x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UaDuIEpAIAMFv8g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62ba4cc0-29637a607cd815ef0080c235;Sampled=0 x-amzn-remapped-date: Tue, 28 Jun 2022 00:35:12 GMT x-amz-cf-pop: SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: cJeOg5uZyKlrsa7XqpngVUr13fqslxDpFmXr-4pTfqqB46xREdv68Q== via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google date: Sat, 02 Jul 2022 09:54:26 GMT age: 57379 etag: "303f4efaa9b98e39a935fc6514d3731d40d2977c" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8553 Md5: e6f97e6b64100081e8bed56216564854 Sha1: 303f4efaa9b98e39a935fc6514d3731d40d2977c Sha256: 92dd803f1633bd65a2b4ac3223d8aa93dd55ed64c74b338aff62323585a3623c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b80a874-3f5e-4581-9500-6d2a0bc1212d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5280 Md5: 5fee14772c357a46083e22f7760c4e6f$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 5280 x-amzn-requestid: 8d592659-76af-4916-a216-2011e218a753 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Ud6kMGqiIAMFY4Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62bbd7b4-6f693c783be26c4c7609e893;Sampled=0 x-amzn-remapped-date: Wed, 29 Jun 2022 04:40:20 GMT x-amz-cf-pop: SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: LfmbR3EHMsw2HZdY0NRUrgL6X-V2YYFWYPPKLlXI92i1d3kPZhE64w== via: 1.1 332ef4544bd8b531e8f11abaa4197c08.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google date: Sat, 02 Jul 2022 14:07:02 GMT age: 42223 etag: "fc1ae4686168214871b24e79961eefb69e493d7a" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5280 Md5: 5fee14772c357a46083e22f7760c4e6f Sha1: fc1ae4686168214871b24e79961eefb69e493d7a Sha256: 8bbaeafbe2750154b05409671d5bbc6bc6c9810a27b7dd3242ac01b5f0ea11da
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2189b33-2a7f-4855-bf26-2a2141a3c2af.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12710 Md5: 1664f9d198d7f3bc50703cb9b9cd6001$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 12710 x-amzn-requestid: b6ba1a4d-c56a-483f-be18-9d77ff931066 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UqIfuHyyIAMF7cg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c0baca-0f90e6cf7b53051055825cdb;Sampled=0 x-amzn-remapped-date: Sat, 02 Jul 2022 21:38:18 GMT x-amz-cf-pop: SEA73-P2, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: wpNmVnYb8-wEAY52dm7tO4VRT583XcWISzmmIfiRNzapvu_mrg6-CA== via: 1.1 45d6a557ecb29942f314e3dd736d817a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google date: Sat, 02 Jul 2022 21:44:24 GMT age: 14781 etag: "2cdd2061cdb1e8d1243e549973f56d6322d9266f" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12710 Md5: 1664f9d198d7f3bc50703cb9b9cd6001 Sha1: 2cdd2061cdb1e8d1243e549973f56d6322d9266f Sha256: 4e4543c8fe957cd6099fb3d6baa6025c78a8a50e4ec0c6747b2823619381a962
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff042c147-ac3d-4da5-b4ac-074ee186f0f2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5914 Md5: 77d03fadc66bedb5cd47a98e88d1f32a$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 5914 x-amzn-requestid: f1d6eed5-7278-4f67-b104-0edcb2eff48f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UqHhtEklIAMFU9Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c0b93d-452012f9121ba215527c9776;Sampled=0 x-amzn-remapped-date: Sat, 02 Jul 2022 21:31:41 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: DcWiV3dANv-sQvegyk1YGLkmRPJZmgjL6eSYyy2_7QsAxoVrbWNYlA== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Sat, 02 Jul 2022 22:09:34 GMT age: 13271 etag: "f96af5e28ada70d57d3cb3428e917e672f32853e" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5914 Md5: 77d03fadc66bedb5cd47a98e88d1f32a Sha1: f96af5e28ada70d57d3cb3428e917e672f32853e Sha256: 50a88e1fe4fb43e6423c255b931647c8d27a250abaa4a2ab29a8cec5570bd386
GET / HTTP/1.1 Host: candapizza.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	$Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (26932) Size: 12534 Md5: 88da34827cb60d6a822d7fc102fa3f6b$ 45.33.20.235 HTTP/1.1 200 OK server: openresty/1.13.6.1 date: Sun, 03 Jul 2022 01:50:47 GMT content-type: text/html; charset=utf-8 transfer-encoding: chunked vary: Accept-Language content-language: en content-encoding: gzip connection: close --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (26932) Size: 12534 Md5: 88da34827cb60d6a822d7fc102fa3f6b Sha1: 15ebd0fc69b632b5bd0fff2e53cfc16aece2db56 Sha256: 93f6b692909b08048b8f07ff9b6198bea57937774d5bd2cf26a54ee2f7c2b8b8 Alerts: Blocklists: - fortinet: Malware
GET /nr-1216.min.js HTTP/1.1 Host: js-agent.newrelic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://candapizza.net/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	151.101.86.137 HTTP/2 200 OK x-amz-id-2: Vf9xsFZHH0UI6bmTnW+KeBzegICGOxvtMLIWtbljNKoJtdkUEk/MfmbYPFui+bgtiUf/4lC5dk8= x-amz-request-id: 4AV5AVKCCR961CNG last-modified: Thu, 14 Apr 2022 16:45:57 GMT etag: "9f533d8cd24b2c5e3b4dc886ecbd43e8" x-amz-version-id: mHHzJIqOizHibcYt0xqAszRr0gQRiNYy content-type: application/javascript server: AmazonS3 cache-control: public, max-age=7200, stale-if-error=604800 content-encoding: gzip accept-ranges: bytes date: Sun, 03 Jul 2022 01:50:47 GMT via: 1.1 varnish x-served-by: cache-bma1673-BMA x-cache: HIT x-cache-hits: 486 x-timer: S1656813048.599218,VS0,VE0 vary: Accept-Encoding cross-origin-resource-policy: cross-origin content-length: 14391 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (32022) Size: 14391 Md5: b7c09cc097b2847f9edc784adba62dcb Sha1: 5aa648623cf5e3b4b215fe5d068a7904c59f2925 Sha256: 6da450b6a3ba53bdab36f6529e987a245cdfca9a37b77790f06dfd8d5797bdaa
GET /favicon.ico HTTP/1.1 Host: candapizza.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://candapizza.net/	$Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: ad4b0f606e0f8465bc4c4c170b37e1a3$ 45.33.20.235 HTTP/1.1 200 OK server: openresty/1.13.6.1 date: Sun, 03 Jul 2022 01:50:47 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT connection: close --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: ad4b0f606e0f8465bc4c4c170b37e1a3 Sha1: 50b30fd5f87c85fe5cba2635cb83316ca71250d7 Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /1/0d385ba8a0?a=31561968&v=1216.487a282&to=NlVXNhBWW0IEAEENXQ8fcxcMVEFYCg0aEEAAVlMLAVpaRQoRGwVCEUMbFAtEXEU6EVoRRgRCGxQLUkJCXxNUA1c%3D&rst=4661&ck=0&ref=http://candapizza.net/&ap=3&be=4347&fe=4529&dc=4526&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1656813042992,%22n%22:0,%22f%22:-5,%22dn%22:-5,%22dne%22:125,%22c%22:126,%22ce%22:260,%22rq%22:260,%22rp%22:4322,%22rpe%22:4323,%22dl%22:4329,%22di%22:4520,%22ds%22:4525,%22de%22:4527,%22dc%22:4528,%22l%22:4528,%22le%22:4533%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken HTTP/1.1 Host: bam.nr-data.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://candapizza.net/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	162.247.241.14 HTTP/1.1 200 OK Content-Type: text/javascript Date: Sun, 03 Jul 2022 01:50:48 GMT Transfer-Encoding: chunked Connection: keep-alive CF-Ray: 724bf8ec6ee30b31-OSL Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC access-control-allow-credentials: true access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS Cross-Origin-Resource-Policy: cross-origin Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Vary: Accept-Encoding Server: cloudflare Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with no line terminators Size: 72 Md5: 107d93e382e2c9b00fbf9fb0edc65d86 Sha1: 77e750e3ebf9706f4f6dd253785602d70be17c6c Sha256: a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 939 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Date: Sun, 03 Jul 2022 00:51:31 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: YDG0-vYSyCUsS6_AYGZx0gpHW3Y-jcqmbkut0oywWECMFvQDpsAxhQ== 

                                        
                                            
Age: 3551 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    91dd975a7b17b2922dd23c0e49314e40

                                                Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2

                                                Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.64

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
content-type: binary/octet-stream 

                                        
                                            
content-length: 5348 

                                        
                                            
last-modified: Tue, 21 Jun 2022 12:10:22 GMT 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Sat, 02 Jul 2022 03:26:42 GMT 

                                        
                                            
etag: "581454acdd98f34fd3fbabd0977ade29" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: dI0_RFW7Y3Gv7b5nvF8p4ewS4JbgtS9Hh5gQPAcPphWDU6LmeewWEQ== 

                                        
                                            
age: 80642 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    581454acdd98f34fd3fbabd0977ade29

                                                Sha1:   d8d86c0b513137aeb85de01cea7b272c35eb6ab4

                                                Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 329 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Date: Sun, 03 Jul 2022 01:38:48 GMT 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Expires: Sun, 03 Jul 2022 01:51:08 GMT 

                                        
                                            
ETag: "1648230346554" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: gEN4WMoOB3rjq2J7lgQU_AYi3GMxKADT3Qg_JxQzXPASne-DpFxPzA== 

                                        
                                            
Age: 715 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: S688+Jduejq+Bfpph7veIA== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         
                                         35.81.71.18

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: N17HCtdrrMh4TTJvJF8/Nhvwo0w= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         
                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "ED6C6F73611FB56DFA41FD028E23F0BC0470D319E51B212B8078C2C0DF8F4638" 

                                        
                                            
Last-Modified: Fri, 01 Jul 2022 19:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2228 

                                        
                                            
Expires: Sun, 03 Jul 2022 02:27:53 GMT 

                                        
                                            
Date: Sun, 03 Jul 2022 01:50:45 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    58ddda9bd3e53e01306c6a03b89b13c9

                                                Sha1:   617798858ee1e2abf3267917c977cd743294db2e

                                                Sha256: ed6c6f73611fb56dfa41fd028e23f0bc0470d319e51b212b8078c2c0df8f4638

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ea1212f-c856-478b-8478-e81dd7306820.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10143 

                                        
                                            
x-amzn-requestid: 7b198982-763e-427b-9abb-2d533f346821 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: UaZt7HBnIAMFtOA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62ba6ff2-30284cbe4fa5a0906070335e;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 28 Jun 2022 03:05:22 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: lTKF2-OdgSohMRk07yAFIDTy8eaebXdLG3Yjwp1h6tEuWANw9ZmYHg== 

                                        
                                            
via: 1.1 f94de31c777bc3bf7b8976bac21b4482.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 02 Jul 2022 13:49:14 GMT 

                                        
                                            
age: 43291 

                                        
                                            
etag: "e64381fdfedbede9788ae6b82affd78ceaf56284" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10143

                                                Md5:    eebebd88b9e7ba3d94e19e6a20be4fd5

                                                Sha1:   e64381fdfedbede9788ae6b82affd78ceaf56284

                                                Sha256: 9a7950214124312b6f80394ea72d0f29773d11f223173c1343c9669e3723247b

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b80a874-3f5e-4581-9500-6d2a0bc1212d.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5280 

                                        
                                            
x-amzn-requestid: 8d592659-76af-4916-a216-2011e218a753 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Ud6kMGqiIAMFY4Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62bbd7b4-6f693c783be26c4c7609e893;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 29 Jun 2022 04:40:20 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: LfmbR3EHMsw2HZdY0NRUrgL6X-V2YYFWYPPKLlXI92i1d3kPZhE64w== 

                                        
                                            
via: 1.1 332ef4544bd8b531e8f11abaa4197c08.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 02 Jul 2022 14:07:02 GMT 

                                        
                                            
age: 42223 

                                        
                                            
etag: "fc1ae4686168214871b24e79961eefb69e493d7a" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5280

                                                Md5:    5fee14772c357a46083e22f7760c4e6f

                                                Sha1:   fc1ae4686168214871b24e79961eefb69e493d7a

                                                Sha256: 8bbaeafbe2750154b05409671d5bbc6bc6c9810a27b7dd3242ac01b5f0ea11da

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff042c147-ac3d-4da5-b4ac-074ee186f0f2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5914 

                                        
                                            
x-amzn-requestid: f1d6eed5-7278-4f67-b104-0edcb2eff48f 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: UqHhtEklIAMFU9Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62c0b93d-452012f9121ba215527c9776;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 02 Jul 2022 21:31:41 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: DcWiV3dANv-sQvegyk1YGLkmRPJZmgjL6eSYyy2_7QsAxoVrbWNYlA== 

                                        
                                            
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 02 Jul 2022 22:09:34 GMT 

                                        
                                            
age: 13271 

                                        
                                            
etag: "f96af5e28ada70d57d3cb3428e917e672f32853e" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5914

                                                Md5:    77d03fadc66bedb5cd47a98e88d1f32a

                                                Sha1:   f96af5e28ada70d57d3cb3428e917e672f32853e

                                                Sha256: 50a88e1fe4fb43e6423c255b931647c8d27a250abaa4a2ab29a8cec5570bd386

                                        
                                            GET /nr-1216.min.js HTTP/1.1 

                                        
                                            
Host: js-agent.newrelic.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://candapizza.net/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.137

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
x-amz-id-2: Vf9xsFZHH0UI6bmTnW+KeBzegICGOxvtMLIWtbljNKoJtdkUEk/MfmbYPFui+bgtiUf/4lC5dk8= 

                                        
                                            
x-amz-request-id: 4AV5AVKCCR961CNG 

                                        
                                            
last-modified: Thu, 14 Apr 2022 16:45:57 GMT 

                                        
                                            
etag: "9f533d8cd24b2c5e3b4dc886ecbd43e8" 

                                        
                                            
x-amz-version-id: mHHzJIqOizHibcYt0xqAszRr0gQRiNYy 

                                        
                                            
content-type: application/javascript 

                                        
                                            
server: AmazonS3 

                                        
                                            
cache-control: public, max-age=7200, stale-if-error=604800 

                                        
                                            
content-encoding: gzip 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Sun, 03 Jul 2022 01:50:47 GMT 

                                        
                                            
via: 1.1 varnish 

                                        
                                            
x-served-by: cache-bma1673-BMA 

                                        
                                            
x-cache: HIT 

                                        
                                            
x-cache-hits: 486 

                                        
                                            
x-timer: S1656813048.599218,VS0,VE0 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
content-length: 14391 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (32022)

                                                Size:   14391

                                                Md5:    b7c09cc097b2847f9edc784adba62dcb

                                                Sha1:   5aa648623cf5e3b4b215fe5d068a7904c59f2925

                                                Sha256: 6da450b6a3ba53bdab36f6529e987a245cdfca9a37b77790f06dfd8d5797bdaa

                                        
                                            GET /1/0d385ba8a0?a=31561968&v=1216.487a282&to=NlVXNhBWW0IEAEENXQ8fcxcMVEFYCg0aEEAAVlMLAVpaRQoRGwVCEUMbFAtEXEU6EVoRRgRCGxQLUkJCXxNUA1c%3D&rst=4661&ck=0&ref=http://candapizza.net/&ap=3&be=4347&fe=4529&dc=4526&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1656813042992,%22n%22:0,%22f%22:-5,%22dn%22:-5,%22dne%22:125,%22c%22:126,%22ce%22:260,%22rq%22:260,%22rp%22:4322,%22rpe%22:4323,%22dl%22:4329,%22di%22:4520,%22ds%22:4525,%22de%22:4527,%22dc%22:4528,%22l%22:4528,%22le%22:4533%7D,%22navigation%22:%7B%7D%7D&jsonp=NREUM.setToken HTTP/1.1 

                                        
                                            
Host: bam.nr-data.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://candapizza.net/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         162.247.241.14

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/javascript

                                        

                                        
                                            
Date: Sun, 03 Jul 2022 01:50:48 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
CF-Ray: 724bf8ec6ee30b31-OSL 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
CF-Cache-Status: DYNAMIC 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS 

                                        
                                            
Cross-Origin-Resource-Policy: cross-origin 

                                        
                                            
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   72

                                                Md5:    107d93e382e2c9b00fbf9fb0edc65d86

                                                Sha1:   77e750e3ebf9706f4f6dd253785602d70be17c6c

                                                Sha256: a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937

URL	candapizza.net/
IP	198.58.118.167
ASN	Linode, LLC
Location	United States
Report completed	2022-07-03 01:50:56 UTC
Status	Loading report..
urlquery Alerts	No alerts detected

Overview

Settings

Intrusion Detection Systems

Blocklists

Files

No files detected

Passive DNS (10)

Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 198.58.118.167

Last 10 reports on ASN: Linode, LLC

Last 2 reports on domain: candapizza.net

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (19)

UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer