urlquery - report: wantdirecttv.com/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-01-22 04:09:39 UTC	34.120.237.76
wantdirecttv.com (10)	0	2015-12-19 02:31:14 UTC	2023-01-07 17:27:06 UTC	45.58.56.126	Unknown ranking
r3.o.lencr.org (7)	344	2020-12-02 08:52:13 UTC	2023-01-22 04:09:04 UTC	23.36.77.32
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2023-01-22 04:09:21 UTC	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-01-22 04:10:28 UTC	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-01-22 04:10:55 UTC	34.117.237.239
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2023-01-22 04:30:18 UTC	93.184.220.29
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-01-22 04:10:30 UTC	34.213.53.184

Scan Date	Severity	Indicator	Comment
2023-01-23	2	wantdirecttv.com/	Phishing
2023-01-23	2	wantdirecttv.com/noindex/css/fonts/Light/OpenSans-Light.woff	Phishing
2023-01-23	2	wantdirecttv.com/noindex/css/fonts/Bold/OpenSans-Bold.woff	Phishing
2023-01-23	2	wantdirecttv.com/noindex/css/fonts/Light/OpenSans-Light.ttf	Phishing
2023-01-23	2	wantdirecttv.com/noindex/css/fonts/Bold/OpenSans-Bold.ttf	Phishing

Date	UQ / IDS / BL	URL	IP
2023-02-23 00:45:35 +0000	0 - 0 - 5	mail.recoveryranchoutreach.org/	45.58.56.126
2023-01-23 01:39:15 +0000	0 - 0 - 5	wantdirecttv.com/	45.58.56.126

Date	UQ / IDS / BL	URL	IP
2023-03-25 06:41:57 +0000	0 - 0 - 1	idlehandstechtoys.com/	216.189.149.181
2023-03-21 13:47:22 +0000	0 - 0 - 0	snign.managlayout.n-e.kr	210.16.120.212
2023-03-21 05:17:27 +0000	0 - 1 - 0	likeastock.com/login.php?online_id=c2b4c5984e (...)	27.100.36.158
2023-03-21 01:11:58 +0000	0 - 1 - 0	kkaway.com/login.php?online_id=2da53d212b88fe (...)	216.189.154.19
2023-03-20 18:51:26 +0000	0 - 1 - 0	cajunbookie.com/login.php?online_id=aad693f1e (...)	216.189.154.225

Date	UQ / IDS / BL	URL	IP
2023-01-23 01:39:15 +0000	0 - 0 - 5	wantdirecttv.com/	45.58.56.126

Date	UQ / IDS / BL	URL	IP
2023-03-25 11:18:38 +0000	0 - 4 - 6	cloudserve.pw/	207.180.212.249
2023-03-25 05:18:18 +0000	0 - 4 - 5	cloudserve.pw/	207.180.212.249
2023-03-24 23:22:06 +0000	0 - 2 - 0	fs1.oneupload.to/	141.255.161.98
2023-03-24 23:00:48 +0000	11 - 14 - 0	royalcheats2.duckdns.org/	85.202.169.13
2023-03-24 22:18:32 +0000	0 - 0 - 15	45.95.168.244/	45.95.168.244

Request	Response
GET / HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: wantdirecttv.com/ FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: 9ec2f0698f1c3497de39a192dd1c3f3e4506ff1a84dbf85082344297dc52e681 45.58.56.126 HTTP/1.1 403 Forbidden Content-Type: text/html; charset=UTF-8 Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Last-Modified: Thu, 16 Oct 2014 13:20:58 GMT ETag: "1321-5058a1e728280" Accept-Ranges: bytes Content-Length: 4897 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text Size: 4897 Md5: 5f3664ed52f6df47c88ec162bb36add4 Sha1: 8e66f78c4d0f075066205823d110bc1902157fcf Sha256: 9ec2f0698f1c3497de39a192dd1c3f3e4506ff1a84dbf85082344297dc52e681 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 2c4d0fd1b7a6d398026a4817267adce203429acdd3defa44a879f0d945f392d5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "2C4D0FD1B7A6D398026A4817267ADCE203429ACDD3DEFA44A879F0D945F392D5" Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3191 Expires: Mon, 23 Jan 2023 02:32:16 GMT Date: Mon, 23 Jan 2023 01:39:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f416977a8d6dfaafb2dbfd0e68b871f8 Sha1: dfa97bd829b03162de91c80133f2fde69b58a8d2 Sha256: 2c4d0fd1b7a6d398026a4817267adce203429acdd3defa44a879f0d945f392d5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: cb028034340b709ece65e45e8fc1a26a64dd85926beaa542f308d3f1d5ee2c84 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "CB028034340B709ECE65E45E8FC1A26A64DD85926BEAA542F308D3F1D5EE2C84" Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2375 Expires: Mon, 23 Jan 2023 02:18:40 GMT Date: Mon, 23 Jan 2023 01:39:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 0be6cec5607bb65c06dbadd33456aec1 Sha1: 9d13129e936eb5fc82e403931884cdc8c6e6ab92 Sha256: cb028034340b709ece65e45e8fc1a26a64dd85926beaa542f308d3f1d5ee2c84
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6547376c41dcaa352cc4e747291916902bcddc0032b750bd84c5e3b2fe6f7d16 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6547376C41DCAA352CC4E747291916902BCDDC0032B750BD84C5E3B2FE6F7D16" Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7994 Expires: Mon, 23 Jan 2023 03:52:19 GMT Date: Mon, 23 Jan 2023 01:39:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 17094b856fde02b2c8c2d3845ad325cf Sha1: 26dc3f2ebf81faf5ab96eb75ffcbead6085528b8 Sha256: 6547376c41dcaa352cc4e747291916902bcddc0032b750bd84c5e3b2fe6f7d16
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 23 Jan 2023 01:34:55 GMT age: 250 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 30db107dcf4380cef05efea409c2e6a3 Sha1: 96e6a306fbc07299aba64e5c14e2bfca35872fa9 Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: X7K+ODTu3BN884m7zpdJoBJ+vNdB9G1cFxUV3Zp1IvpjWv035fFK/bb79fL4WuGz7G1o7D/LhME= x-amz-request-id: RJ3KZB58DDF2PRJH content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 23 Jan 2023 00:47:30 GMT age: 3095 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 7b922915ebf1fa3639b333f994c74f24 Sha1: 144a3f80b98fd0652d4614f24cf6cbbee40f8938 Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 23 Jan 2023 01:39:05 GMT content-length: 12 access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /noindex/css/open-sans.css HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wantdirecttv.com/	URL: wantdirecttv.com/noindex/css/open-sans.css FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: 65e9f0d6919c412dd5a04c322ce9cf9db80a1182f57778606a76110086c49fca 45.58.56.126 HTTP/1.1 200 OK Content-Type: text/css Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT ETag: "13d9-4fc0a3f32a9c0" Accept-Ranges: bytes Content-Length: 5081 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text Size: 5081 Md5: 0ca7398a3e9ef11b70b5dfd1a052fe58 Sha1: 8bb7623c7027e927c0eced114d6011c57101a26f Sha256: 65e9f0d6919c412dd5a04c322ce9cf9db80a1182f57778606a76110086c49fca
GET /noindex/css/bootstrap.min.css HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wantdirecttv.com/	URL: wantdirecttv.com/noindex/css/bootstrap.min.css FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: bc40aeafcd25bc944d0d6357298c1b198b4a1fe294e0b84015d04b72cf942c10 45.58.56.126 HTTP/1.1 200 OK Content-Type: text/css Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT ETag: "4b8d-4fc0a3f32a9c0" Accept-Ranges: bytes Content-Length: 19341 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text, with very long lines (19170) Size: 19341 Md5: 44c7856dea679ebcccf8fe201fbe1a7c Sha1: 192a297f8aeda2bcdd0faa5320ffff825d24116f Sha256: bc40aeafcd25bc944d0d6357298c1b198b4a1fe294e0b84015d04b72cf942c10
GET /images/apache_pb.gif HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wantdirecttv.com/	URL: wantdirecttv.com/images/apache_pb.gif FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: 1654416fec35a8b5d36ee0257025cec63e56dfe8572b6ff67c6b0d0d43158cbb 45.58.56.126 HTTP/1.1 200 OK Content-Type: image/gif Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT ETag: "916-4fc0a3f32a9c0" Accept-Ranges: bytes Content-Length: 2326 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: GIF image data, version 89a, 259 x 32\012- data Size: 2326 Md5: 48bc8b181b36c9289866a2e30f6afedd Sha1: 7bcc5d916d33ab08929a9f7c1d07c33ac1ba47ba Sha256: 1654416fec35a8b5d36ee0257025cec63e56dfe8572b6ff67c6b0d0d43158cbb
GET /images/poweredby.png HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wantdirecttv.com/	URL: wantdirecttv.com/images/poweredby.png FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: 5b720d579bbc1f8fee3b64df9290d41a28c747a5802589e48e05b7ebbfe9fc2f 45.58.56.126 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT ETag: "f74-4fc0a3f32a9c0" Accept-Ranges: bytes Content-Length: 3956 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive --- Additional Info --- Magic: PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced\012- data Size: 3956 Md5: 5b1ca9f747c1b73dfa1c508765d9056a Sha1: 6b319c943d8c69e212e7de8385802891dbafe8a3 Sha256: 5b720d579bbc1f8fee3b64df9290d41a28c747a5802589e48e05b7ebbfe9fc2f
GET /noindex/css/fonts/Light/OpenSans-Light.woff HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://wantdirecttv.com/noindex/css/open-sans.css	URL: wantdirecttv.com/noindex/css/fonts/Light/OpenSans-Light.woff FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: c4183128dc59a2ce673414a77fcab7ca0250ef354ef636df49d2b83580734ee0 45.58.56.126 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Content-Length: 241 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 241 Md5: d5d3f08fc8f1b36bac0b06b89d5384ca Sha1: cafebd0173cce7edfcbadcea5b8eabc4d7a20511 Sha256: c4183128dc59a2ce673414a77fcab7ca0250ef354ef636df49d2b83580734ee0 Alerts: Blocklists: - fortinet: Phishing
GET /noindex/css/fonts/Bold/OpenSans-Bold.woff HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://wantdirecttv.com/noindex/css/open-sans.css	URL: wantdirecttv.com/noindex/css/fonts/Bold/OpenSans-Bold.woff FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: b5b54ea0662073c401cabb250a4f107c4763241fa43418503ae5764cff7e9ee4 45.58.56.126 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Content-Length: 239 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 239 Md5: 55e916743163813c7b8f4524f6e36b99 Sha1: e1353703fda388ec26bf105b4132b0459f10163e Sha256: b5b54ea0662073c401cabb250a4f107c4763241fa43418503ae5764cff7e9ee4 Alerts: Blocklists: - fortinet: Phishing
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 23 Jan 2023 01:17:30 GMT age: 1295 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /noindex/css/fonts/Light/OpenSans-Light.ttf HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wantdirecttv.com/noindex/css/open-sans.css	URL: wantdirecttv.com/noindex/css/fonts/Light/OpenSans-Light.ttf FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: 67db0d028a14f7beb79f8bc441b5d687ca683511965d60e40faebec708d85612 45.58.56.126 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Content-Length: 240 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 240 Md5: 5a99182bd45553a369543ec2937fa690 Sha1: c8766a2b6d830b3d38263d54b0e88c1e384664b7 Sha256: 67db0d028a14f7beb79f8bc441b5d687ca683511965d60e40faebec708d85612 Alerts: Blocklists: - fortinet: Phishing
GET /noindex/css/fonts/Bold/OpenSans-Bold.ttf HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wantdirecttv.com/noindex/css/open-sans.css	URL: wantdirecttv.com/noindex/css/fonts/Bold/OpenSans-Bold.ttf FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: e163df3b08c83f6bdc15321fb0403d1dd059f2846037916a3d12ad2806cb5978 45.58.56.126 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Content-Length: 238 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 238 Md5: 75a28665a8da5eb0e3200d8279c7ef42 Sha1: ee945af618fe1976e31cd1c467ae0cd68a7fad29 Sha256: e163df3b08c83f6bdc15321fb0403d1dd059f2846037916a3d12ad2806cb5978 Alerts: Blocklists: - fortinet: Phishing
GET /favicon.ico HTTP/1.1 Host: wantdirecttv.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://wantdirecttv.com/	URL: wantdirecttv.com/favicon.ico FQDN: wantdirecttv.com IP: 45.58.56.126 HASH: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642 45.58.56.126 HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Date: Mon, 23 Jan 2023 01:39:05 GMT Server: Apache/2.4.6 (CentOS) PHP/7.2.34 Content-Length: 209 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 209 Md5: 18ffb59b61525f781cf9251045be575d Sha1: bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 437e2d4e2bbfb33b0ff696172378ce55a0a5ed005a1b8c4005eab4a6995a3042 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2650 Cache-Control: max-age=115912 Date: Mon, 23 Jan 2023 01:39:05 GMT Etag: "63ccfca7-1d7" Expires: Tue, 24 Jan 2023 09:50:57 GMT Last-Modified: Sun, 22 Jan 2023 09:06:47 GMT Server: ECS (ska/F71A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 0c74880fa99032b5c3831c179d702419 Sha1: 0020b368309735c94d8053d3781a7efb7283cfc5 Sha256: 437e2d4e2bbfb33b0ff696172378ce55a0a5ed005a1b8c4005eab4a6995a3042
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 97YBv+bD/S5CPDWf45CQhQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 34.213.53.184 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 34.213.53.184 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: oWfJsPehrXDg+4CBAmfgz9cIKbk= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF" Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11182 Expires: Mon, 23 Jan 2023 04:45:29 GMT Date: Mon, 23 Jan 2023 01:39:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a618971ebc90b5698ddbabc4637e3345 Sha1: f920b73a7c9b57d77194ba8ba406664d8469b6b6 Sha256: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF" Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11182 Expires: Mon, 23 Jan 2023 04:45:29 GMT Date: Mon, 23 Jan 2023 01:39:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a618971ebc90b5698ddbabc4637e3345 Sha1: f920b73a7c9b57d77194ba8ba406664d8469b6b6 Sha256: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF" Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11182 Expires: Mon, 23 Jan 2023 04:45:29 GMT Date: Mon, 23 Jan 2023 01:39:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a618971ebc90b5698ddbabc4637e3345 Sha1: f920b73a7c9b57d77194ba8ba406664d8469b6b6 Sha256: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF" Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11182 Expires: Mon, 23 Jan 2023 04:45:29 GMT Date: Mon, 23 Jan 2023 01:39:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a618971ebc90b5698ddbabc4637e3345 Sha1: f920b73a7c9b57d77194ba8ba406664d8469b6b6 Sha256: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F296d62aa-29a6-401f-a40f-9238dace1001.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 679e5a9ab43a5599759171b70ad5dbe0c4ca8facb895f08ef0313b0c7e691ea3 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7387 x-amzn-requestid: 54845590-a39f-4a1b-ba4a-fe24368b268a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fD7N3GmQIAMF6AQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cb0bf2-4b4bf4fc209388b74cb1c7f7;Sampled=0 x-amzn-remapped-date: Fri, 20 Jan 2023 21:47:30 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 67ewmF74mKQGH8hoGiYfRHTaVmS0JZc4WkSHXiODoz8sirBFY5MD2w== via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google date: Sun, 22 Jan 2023 16:31:47 GMT age: 32840 etag: "fb07a0e3cfcb7f53b94f614a2e96ec1d8d5967d4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7387 Md5: 9c9e3df640be93567ea081ffe31576f6 Sha1: fb07a0e3cfcb7f53b94f614a2e96ec1d8d5967d4 Sha256: 679e5a9ab43a5599759171b70ad5dbe0c4ca8facb895f08ef0313b0c7e691ea3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf2abec1-a455-47b9-9aaf-69794032330f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9adfddc8877a8ea9f1c3bcc0af99548cb11dc4e1d62a706bf9b2a5cc6d72e82f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7982 x-amzn-requestid: 59d91715-b444-445e-bd6b-268fc630024b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fKezLExAIAMFSeA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cdab47-1e12e8f335ea162532ce6aca;Sampled=0 x-amzn-remapped-date: Sun, 22 Jan 2023 21:31:51 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: R-9qgCHHj8iD9FEwYhzLoXAQvdrO6D6qRIWAvyQJyfB-LHDGUjvmzA== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google date: Sun, 22 Jan 2023 21:47:59 GMT age: 13868 etag: "a67bd0fa5beb10935442bef246bf4f52ec6e74bd" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7982 Md5: 8ec35d753b6b816abcd14030255a7b76 Sha1: a67bd0fa5beb10935442bef246bf4f52ec6e74bd Sha256: 9adfddc8877a8ea9f1c3bcc0af99548cb11dc4e1d62a706bf9b2a5cc6d72e82f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0247217-9730-4fdb-8be7-667f0568ffc2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 23421c7f67582c927dacf52c25779e43f5196a40fb1b70467ed737c2417ba39e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10822 x-amzn-requestid: 60a33a3f-36b1-4f6e-a17b-964118a9da31 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: e3AcMGeNoAMFs7A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c5e11a-7673a87f26759a1a64e4aab2;Sampled=0 x-amzn-remapped-date: Mon, 16 Jan 2023 23:43:22 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: yxOiDecizhIzCJoYi-ps_EhYJkKfIagTqM0ybgsgvdVRAgjdsSTRTQ== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google date: Sun, 22 Jan 2023 21:44:17 GMT age: 14090 etag: "4c6d22bdc48d7011e2c875ee18876da6a8401669" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10822 Md5: d95b4a29d3337c5c2ca7e4d31fa3a0b6 Sha1: 4c6d22bdc48d7011e2c875ee18876da6a8401669 Sha256: 23421c7f67582c927dacf52c25779e43f5196a40fb1b70467ed737c2417ba39e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d6f86c0ddbabd5c4fd7cee72ce4da62ccddd9d29139c9ab033bb1ab8425bae22 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11918 x-amzn-requestid: ff47dd24-004f-4cc7-acfb-283b2e751f23 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fEqxwEyWoAMF3gw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cb580b-1e95f74b0846080f75a757f6;Sampled=0 x-amzn-remapped-date: Sat, 21 Jan 2023 03:12:11 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: ntW_cYMwX6UWInGOxxPlwnV1AJh46X-hiLvwggRz9oa1Yno6jyE51g== via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Sun, 22 Jan 2023 03:16:54 GMT age: 80533 etag: "4b758cc432874384f330568177eef5a328d7e69a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11918 Md5: 4cb7be12333fa7ea3353901b4b3215af Sha1: 4b758cc432874384f330568177eef5a328d7e69a Sha256: d6f86c0ddbabd5c4fd7cee72ce4da62ccddd9d29139c9ab033bb1ab8425bae22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98ca818c-7a5c-4b9c-abcd-d5c3863dc494.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b5e70ff3468e371978f7ee5925ea134d3e4924133706e40c639f0bb801626965 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11315 x-amzn-requestid: 319be6a8-4299-4604-9318-b1da6c3c36ed x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fEqzCHNtIAMF4Xw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cb5813-00f03a796ba145612651ec7b;Sampled=0 x-amzn-remapped-date: Sat, 21 Jan 2023 03:12:19 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Xzf1m8lYtyYgMJQHz4547AYNdI8yxGbKv9NeUztnI0mLivxu3CXnoQ== via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google date: Sun, 22 Jan 2023 03:45:44 GMT age: 78803 etag: "314dedb6225295b6a297bd3926b2cb6ec26b3503" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11315 Md5: 54ac06f5a4f9c73950b5d4deadcd89c5 Sha1: 314dedb6225295b6a297bd3926b2cb6ec26b3503 Sha256: b5e70ff3468e371978f7ee5925ea134d3e4924133706e40c639f0bb801626965
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f055318-7ab9-4f4f-a005-7938c4d1d126.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d85a51760a2d0a3587d5e3a876aaf689d7a2efedb3e98a408bd8b88711dc7690 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6579 x-amzn-requestid: da35f55e-1e0a-4fc3-8ed7-f5b6cac11588 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fIgS0FHuIAMFX2A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63cce0de-26fcfcca173b5436784cc481;Sampled=0 x-amzn-remapped-date: Sun, 22 Jan 2023 07:08:14 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 35gPIRU45VIH7rDwa1v3oWH7XEQk-KHeDe-nX5JYjydICDG7a_kBbg== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Sun, 22 Jan 2023 20:46:02 GMT age: 17585 etag: "fe131d1a8686593034547d3a465903912abb4cc7" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6579 Md5: ecf206cacc8cdeeba5f730d98e0570b7 Sha1: fe131d1a8686593034547d3a465903912abb4cc7 Sha256: d85a51760a2d0a3587d5e3a876aaf689d7a2efedb3e98a408bd8b88711dc7690

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "CB028034340B709ECE65E45E8FC1A26A64DD85926BEAA542F308D3F1D5EE2C84" 

                                        
                                            
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2375 

                                        
                                            
Expires: Mon, 23 Jan 2023 02:18:40 GMT 

                                        
                                            
Date: Mon, 23 Jan 2023 01:39:05 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    0be6cec5607bb65c06dbadd33456aec1

                                                Sha1:   9d13129e936eb5fc82e403931884cdc8c6e6ab92

                                                Sha256: cb028034340b709ece65e45e8fc1a26a64dd85926beaa542f308d3f1d5ee2c84

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Mon, 23 Jan 2023 01:34:55 GMT 

                                        
                                            
age: 250 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    30db107dcf4380cef05efea409c2e6a3

                                                Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9

                                                Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 23 Jan 2023 01:39:05 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /noindex/css/bootstrap.min.css HTTP/1.1 

                                        
                                            
Host: wantdirecttv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://wantdirecttv.com/

                                         45.58.56.126

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Mon, 23 Jan 2023 01:39:05 GMT 

                                        
                                            
Server: Apache/2.4.6 (CentOS) PHP/7.2.34 

                                        
                                            
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT 

                                        
                                            
ETag: "4b8d-4fc0a3f32a9c0" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Content-Length: 19341 

                                        
                                            
Keep-Alive: timeout=5, max=100 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (19170)

                                                Size:   19341

                                                Md5:    44c7856dea679ebcccf8fe201fbe1a7c

                                                Sha1:   192a297f8aeda2bcdd0faa5320ffff825d24116f

                                                Sha256: bc40aeafcd25bc944d0d6357298c1b198b4a1fe294e0b84015d04b72cf942c10

                                        
                                            GET /images/poweredby.png HTTP/1.1 

                                        
                                            
Host: wantdirecttv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://wantdirecttv.com/

                                         45.58.56.126

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Mon, 23 Jan 2023 01:39:05 GMT 

                                        
                                            
Server: Apache/2.4.6 (CentOS) PHP/7.2.34 

                                        
                                            
Last-Modified: Tue, 17 Jun 2014 16:00:47 GMT 

                                        
                                            
ETag: "f74-4fc0a3f32a9c0" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Content-Length: 3956 

                                        
                                            
Keep-Alive: timeout=5, max=100 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced\012- data

                                                Size:   3956

                                                Md5:    5b1ca9f747c1b73dfa1c508765d9056a

                                                Sha1:   6b319c943d8c69e212e7de8385802891dbafe8a3

                                                Sha256: 5b720d579bbc1f8fee3b64df9290d41a28c747a5802589e48e05b7ebbfe9fc2f

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: wantdirecttv.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://wantdirecttv.com/

                                         45.58.56.126

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html; charset=iso-8859-1

                                        

                                        
                                            
Date: Mon, 23 Jan 2023 01:39:05 GMT 

                                        
                                            
Server: Apache/2.4.6 (CentOS) PHP/7.2.34 

                                        
                                            
Content-Length: 209 

                                        
                                            
Keep-Alive: timeout=5, max=97 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   209

                                                Md5:    18ffb59b61525f781cf9251045be575d

                                                Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d

                                                Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: 97YBv+bD/S5CPDWf45CQhQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         34.213.53.184

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: oWfJsPehrXDg+4CBAmfgz9cIKbk= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF" 

                                        
                                            
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=11182 

                                        
                                            
Expires: Mon, 23 Jan 2023 04:45:29 GMT 

                                        
                                            
Date: Mon, 23 Jan 2023 01:39:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a618971ebc90b5698ddbabc4637e3345

                                                Sha1:   f920b73a7c9b57d77194ba8ba406664d8469b6b6

                                                Sha256: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F7C66C647552A10C53D758E1EEDD450226C969B0001A25A616773D57F10E16BF" 

                                        
                                            
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=11182 

                                        
                                            
Expires: Mon, 23 Jan 2023 04:45:29 GMT 

                                        
                                            
Date: Mon, 23 Jan 2023 01:39:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a618971ebc90b5698ddbabc4637e3345

                                                Sha1:   f920b73a7c9b57d77194ba8ba406664d8469b6b6

                                                Sha256: f7c66c647552a10c53d758e1eedd450226c969b0001a25a616773d57f10e16bf

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf2abec1-a455-47b9-9aaf-69794032330f.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7982 

                                        
                                            
x-amzn-requestid: 59d91715-b444-445e-bd6b-268fc630024b 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fKezLExAIAMFSeA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63cdab47-1e12e8f335ea162532ce6aca;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 22 Jan 2023 21:31:51 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: R-9qgCHHj8iD9FEwYhzLoXAQvdrO6D6qRIWAvyQJyfB-LHDGUjvmzA== 

                                        
                                            
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 22 Jan 2023 21:47:59 GMT 

                                        
                                            
age: 13868 

                                        
                                            
etag: "a67bd0fa5beb10935442bef246bf4f52ec6e74bd" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7982

                                                Md5:    8ec35d753b6b816abcd14030255a7b76

                                                Sha1:   a67bd0fa5beb10935442bef246bf4f52ec6e74bd

                                                Sha256: 9adfddc8877a8ea9f1c3bcc0af99548cb11dc4e1d62a706bf9b2a5cc6d72e82f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 11918 

                                        
                                            
x-amzn-requestid: ff47dd24-004f-4cc7-acfb-283b2e751f23 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fEqxwEyWoAMF3gw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63cb580b-1e95f74b0846080f75a757f6;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 21 Jan 2023 03:12:11 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: ntW_cYMwX6UWInGOxxPlwnV1AJh46X-hiLvwggRz9oa1Yno6jyE51g== 

                                        
                                            
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 22 Jan 2023 03:16:54 GMT 

                                        
                                            
age: 80533 

                                        
                                            
etag: "4b758cc432874384f330568177eef5a328d7e69a" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   11918

                                                Md5:    4cb7be12333fa7ea3353901b4b3215af

                                                Sha1:   4b758cc432874384f330568177eef5a328d7e69a

                                                Sha256: d6f86c0ddbabd5c4fd7cee72ce4da62ccddd9d29139c9ab033bb1ab8425bae22

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f055318-7ab9-4f4f-a005-7938c4d1d126.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6579 

                                        
                                            
x-amzn-requestid: da35f55e-1e0a-4fc3-8ed7-f5b6cac11588 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fIgS0FHuIAMFX2A= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63cce0de-26fcfcca173b5436784cc481;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 22 Jan 2023 07:08:14 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: 35gPIRU45VIH7rDwa1v3oWH7XEQk-KHeDe-nX5JYjydICDG7a_kBbg== 

                                        
                                            
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 22 Jan 2023 20:46:02 GMT 

                                        
                                            
age: 17585 

                                        
                                            
etag: "fe131d1a8686593034547d3a465903912abb4cc7" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6579

                                                Md5:    ecf206cacc8cdeeba5f730d98e0570b7

                                                Sha1:   fe131d1a8686593034547d3a465903912abb4cc7

                                                Sha256: d85a51760a2d0a3587d5e3a876aaf689d7a2efedb3e98a408bd8b88711dc7690

URL	wantdirecttv.com/
IP	45.58.56.126 (United States)
ASN	#7489 HostUS
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-01-23 01:39:15 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	5
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (8)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 45.58.56.126

Last 5 reports on ASN: HostUS

Last 1 reports on domain: wantdirecttv.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (29)

Overview

Domain Summary (8)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 45.58.56.126

Last 5 reports on ASN: HostUS

Last 1 reports on domain: wantdirecttv.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (29)

Network Intrusion Detection Systems