Report - crossbore.ngridsafety.com/

Report Overview

Submitted URL
crossbore.ngridsafety.com/
IP
23.253.109.75
ASN
#33070 RMH-14
Submitted
2022-09-14 19:40:36
Access
Website Title
Final URL
Tags
None
urlquery detections
Phishing website detected

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.36
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.25
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	2.8 kB	142.250.74.3
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	54.202.70.174
maxcdn.bootstrapcdn.com	724	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	414 B	872 B	104.18.11.207
crossbore.ngridsafety.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.0 kB	1.0 MB	23.253.109.75
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.36.77.32
ajax.googleapis.com	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	390 B	35 kB	172.217.21.170
ssl.google-analytics.com	275	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	363 B	18 kB	142.250.74.168
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	67 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js	96 kB	2023-03-07	2024-04-23
Pretty URL ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js IP 172.217.21.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:51 Last Seen2024-04-23 21:01:36 Times Seen10023 Hash 5790ead7ad3ba27397aedfa3d263b867 8130544c215fe5d1ec081d83461bf4a711e74882 2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0 Loading...

	crossbore.ngridsafety.com/js/general.js	1.4 kB	2023-03-07	2023-03-07
Pretty URL crossbore.ngridsafety.com/js/general.js IP 23.253.109.75 ASN #33070 RMH-14 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:31:40 Last Seen2023-03-07 16:31:40 Times Seen1 Hash 8e82a194e747e6f91c0c44e4704082ed 0d256cacd5c263fe00925468f58695c101a8316b 1bab43f0c2f94539641acfff2a1178076d26f1306c2601a4e69fa03cd4739512 Loading...

	crossbore.ngridsafety.com/SpryAssets/SpryValidationSelect.js	16 kB	2023-03-07	2023-04-26
Pretty URL crossbore.ngridsafety.com/SpryAssets/SpryValidationSelect.js IP 23.253.109.75 ASN #33070 RMH-14 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:31:40 Last Seen2023-04-26 08:19:44 Times Seen3 Hash 0a0d69d4afcd5fce66d0d23d4189bf4a 9fd938571498d463ee547aa8141d55c769b71f89 cb37a062cfef9106e34d724d962ee6caaf329f2b718bc32af2481ed2313bbe80 Loading...

	crossbore.ngridsafety.com/SpryAssets/SpryValidationCheckbox.js	16 kB	2023-03-07	2023-03-07
Pretty URL crossbore.ngridsafety.com/SpryAssets/SpryValidationCheckbox.js IP 23.253.109.75 ASN #33070 RMH-14 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:31:40 Last Seen2023-03-07 16:31:40 Times Seen1 Hash 7f2d80f44b9dd7ed658922968ec0adab 09f143b273081ab5371804e5fdb5fc9c4869f094 81b327a6f5634376ca4a83f58051912a8a8319e03fb3826be606065609bb6e4d Loading...

	crossbore.ngridsafety.com/	443 B	2023-03-07	2023-03-07
Pretty URL crossbore.ngridsafety.com/ IP 23.253.109.75 ASN #33070 RMH-14 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:31:40 Last Seen2023-03-07 16:31:40 Times Seen1 Hash 7065abb9b94b2492dba866c5555cc0ab 4b8059649bdb3084a1984dfd488edc32c5bb0f28 23ccbb2042e5d4cf167bfd8fd7a0f42029e58b1e6cdc6ca2a0fc073d3c96990f Loading...

	ssl.google-analytics.com/ga.js	46 kB	2023-03-07	2024-04-16
Pretty URL ssl.google-analytics.com/ga.js IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:00 Last Seen2024-04-16 23:24:27 Times Seen3495 Hash e9372f0ebbcf71f851e3d321ef2a8e5a 2c7d19d1af7d97085c977d1b69dcb8b84483d87c 1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f Loading...

	crossbore.ngridsafety.com/SpryAssets/SpryValidationRadio.js	15 kB	2023-03-07	2023-03-07
Pretty URL crossbore.ngridsafety.com/SpryAssets/SpryValidationRadio.js IP 23.253.109.75 ASN #33070 RMH-14 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:31:40 Last Seen2023-03-07 16:31:40 Times Seen1 Hash edda878e134e05df4e33109e7d444243 8c3e4eaff280540b4a3b664a57dea7c81202527e 890e1a049aea1d180d19ee61d40143b3a37016f3702fabcb0a085ccad357cb7d Loading...

	crossbore.ngridsafety.com/js/html5shiv.js	9.5 kB	2023-03-07	2023-09-17
Pretty URL crossbore.ngridsafety.com/js/html5shiv.js IP 23.253.109.75 ASN #33070 RMH-14 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:31:40 Last Seen2023-09-17 12:54:39 Times Seen5 Hash b6a87f7b308658503d9cec89c2c8fdce 3a70f3ba0809d58a026d89fd18a7549909871941 38dfb8438edcb2e660c544c4c575b957bdd27c39b0944ac13ceaa4ff8f812a99 Loading...

	crossbore.ngridsafety.com/SpryAssets/SpryValidationTextField.js	75 kB	2023-03-07	2024-02-05
Pretty URL crossbore.ngridsafety.com/SpryAssets/SpryValidationTextField.js IP 23.253.109.75 ASN #33070 RMH-14 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:36 Last Seen2024-02-05 01:44:11 Times Seen140 Hash cb5d591ab3ae137715aeeda1fba09ab6 546721b9fd09155dce7575afdf0b9d1769d62eed c68f7f490ee04a990e47c93086b6eb344516546e94bccb0ed1f07e8b6424a8bf Loading...

HTTP Transactions (44)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.36

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 14 Sep 2022 19:09:41 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8pxsF1A7K4wDWnK5aMNMTpbRNRcp-wUs3OiqlZuaOKhj_k0MzNE_ag==
Age: 1844

crossbore.ngridsafety.com/

23.253.109.75

302 Found

218 B

URL HTTP/1.1
crossbore.ngridsafety.com/
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
218 B (218 bytes)
Hash
9b7fa268fa8ae14c915f4e6b411104a9
606eeb540865ae75f0990eab1c44657f74b1e5fc
bb19ab060e9bd86d3d48aa1d04932b11aa1b86b9d3515bbf681147fb4d0b87b8

HTTP Headers

GET / HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Date: Wed, 14 Sep 2022 19:40:25 GMT
Server: Apache
Location: https://crossbore.ngridsafety.com/
Content-Length: 218
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16835
Expires: Thu, 15 Sep 2022 00:21:00 GMT
Date: Wed, 14 Sep 2022 19:40:25 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.25

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.25:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: l5PQesE9rmAHCENBtFREr8paNBdOBZ5aGeRcvArWPsWWaZuhf7ZU-A==
age: 54310
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 19:40:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.36

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 14 Sep 2022 19:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 14 Sep 2022 19:37:01 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EgF0LoMGqZVT0TnEOpuW5CrjAHWxeRuIguHD6GAmzkqIg7jk6jSddw==
Age: 2224

crossbore.ngridsafety.com/

23.253.109.75

200 OK

9.2 kB

URL HTTP/1.1
crossbore.ngridsafety.com/
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (423)
Size
9.2 kB (9235 bytes)
Hash
55ba78f4e69fc0618d2dbff77b980c9c
93a4af08f6acf114749a0b932eb6e11cedd5192e
6e88569c474d8471ac3b6761cdfb23a870ecaff733671e327322c5d74dd6396e

HTTP Headers

GET / HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 19:40:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d3ac56507d17ffff5e8b486406985d68
17d26336cd8ea65af3f23db166945f1b3fbbfbab
e7e321340eed681c1269f715b0214e1511d5762fffbe930e7c157b800afa9a39

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3960
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 19:40:26 GMT
Last-Modified: Wed, 14 Sep 2022 18:34:26 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js

172.217.21.170

200 OK

34 kB

URL HTTP/2
ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js
IP
172.217.21.170:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (32047)
Size
34 kB (33495 bytes)
Hash
7a83c39ee44cf30d4e6d9a8d5c74276e
175f5e717c0fd96485d4371234d4c54355753c2b
ab02740b3bd7f47ad3a0ebc2571a67e1d00dfef34bb04e87adb08b0b61381d8e

HTTP Headers

GET /ajax/libs/jquery/1.11.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33495
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 07:59:53 GMT
expires: Thu, 14 Sep 2023 07:59:53 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 42033
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 19:40:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

crossbore.ngridsafety.com/css/site.css

23.253.109.75

200 OK

32 kB

URL HTTP/1.1
crossbore.ngridsafety.com/css/site.css
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text
Size
32 kB (32247 bytes)
Hash
5a5a9513f5153370ad75534bd7faaac1
0519200b6930a43e29f88f81ff6daf153df66443
b662c92ec334bfa7eb97d0665567885e3097c087f3c0c3294bb4246369c72fb5

HTTP Headers

GET /css/site.css HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:34 GMT
ETag: "7df7-59c0b1165a280"
Accept-Ranges: bytes
Content-Length: 32247
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

crossbore.ngridsafety.com/js/general.js

23.253.109.75

200 OK

1.4 kB

URL HTTP/1.1
crossbore.ngridsafety.com/js/general.js
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text
Size
1.4 kB (1385 bytes)
Hash
8e82a194e747e6f91c0c44e4704082ed
0d256cacd5c263fe00925468f58695c101a8316b
1bab43f0c2f94539641acfff2a1178076d26f1306c2601a4e69fa03cd4739512

HTTP Headers

GET /js/general.js HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:24 GMT
ETag: "569-59c0b10cd0c00"
Accept-Ranges: bytes
Content-Length: 1385
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

crossbore.ngridsafety.com/SpryAssets/SpryValidationRadio.js

23.253.109.75

200 OK

15 kB

URL HTTP/1.1
crossbore.ngridsafety.com/SpryAssets/SpryValidationRadio.js
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text
Size
15 kB (15064 bytes)
Hash
edda878e134e05df4e33109e7d444243
8c3e4eaff280540b4a3b664a57dea7c81202527e
890e1a049aea1d180d19ee61d40143b3a37016f3702fabcb0a085ccad357cb7d

HTTP Headers

GET /SpryAssets/SpryValidationRadio.js HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:33 GMT
ETag: "3ad8-59c0b11566040"
Accept-Ranges: bytes
Content-Length: 15064
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

crossbore.ngridsafety.com/js/html5shiv.js

23.253.109.75

200 OK

9.5 kB

URL HTTP/1.1
crossbore.ngridsafety.com/js/html5shiv.js
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
HTML document, ASCII text
Size
9.5 kB (9516 bytes)
Hash
b6a87f7b308658503d9cec89c2c8fdce
3a70f3ba0809d58a026d89fd18a7549909871941
38dfb8438edcb2e660c544c4c575b957bdd27c39b0944ac13ceaa4ff8f812a99

HTTP Headers

GET /js/html5shiv.js HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:24 GMT
ETag: "252c-59c0b10cd0c00"
Accept-Ranges: bytes
Content-Length: 9516
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

push.services.mozilla.com/

54.202.70.174

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.202.70.174:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ko4376E++k0IXtO2cnYB+g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BWyWWtM4F/LeEl1Uu1SVlU3WoYA=

crossbore.ngridsafety.com/SpryAssets/SpryValidationTextField.css

23.253.109.75

200 OK

3.1 kB

URL HTTP/1.1
crossbore.ngridsafety.com/SpryAssets/SpryValidationTextField.css
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
assembler source, ASCII text
Size
3.1 kB (3068 bytes)
Hash
51999af1d99e126f7ce7d06b5cbe4db2
654def97b24744e2c0131cb90ad82186b2c1ea4c
491614601f5dbc1117440ab0549af437f82837e97a79b81d605ff15b32400a4f

HTTP Headers

GET /SpryAssets/SpryValidationTextField.css HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:32 GMT
ETag: "bfc-59c0b11471e00"
Accept-Ranges: bytes
Content-Length: 3068
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

crossbore.ngridsafety.com/SpryAssets/SpryValidationCheckbox.css

23.253.109.75

200 OK

1.0 kB

URL HTTP/1.1
crossbore.ngridsafety.com/SpryAssets/SpryValidationCheckbox.css
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text
Size
1.0 kB (1041 bytes)
Hash
924004b2ff561796d67e6dc78ebabfbb
9d33e972057da44a190fb27f04a2d7061957b0f6
9d91db0ca19033e83ed47a12d674708776aa448a6d4df84298f2633cd1491351

HTTP Headers

GET /SpryAssets/SpryValidationCheckbox.css HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:33 GMT
ETag: "411-59c0b11566040"
Accept-Ranges: bytes
Content-Length: 1041
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

crossbore.ngridsafety.com/SpryAssets/SpryValidationSelect.css

23.253.109.75

200 OK

2.0 kB

URL HTTP/1.1
crossbore.ngridsafety.com/SpryAssets/SpryValidationSelect.css
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text
Size
2.0 kB (1993 bytes)
Hash
0a0dd8f841e4998bbbed3f67844d18cc
ff0891aa5b29a186c3119f7eddaecb372ad0b2eb
d9fb735e50f00a5b8a82cc47a3b64e8d91c78179bda5355954484dcfe1a9eec1

HTTP Headers

GET /SpryAssets/SpryValidationSelect.css HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:32 GMT
ETag: "7c9-59c0b11471e00"
Accept-Ranges: bytes
Content-Length: 1993
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css

crossbore.ngridsafety.com/SpryAssets/SpryValidationSelect.js

23.253.109.75

200 OK

16 kB

URL HTTP/1.1
crossbore.ngridsafety.com/SpryAssets/SpryValidationSelect.js
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text
Size
16 kB (16228 bytes)
Hash
0a0d69d4afcd5fce66d0d23d4189bf4a
9fd938571498d463ee547aa8141d55c769b71f89
cb37a062cfef9106e34d724d962ee6caaf329f2b718bc32af2481ed2313bbe80

HTTP Headers

GET /SpryAssets/SpryValidationSelect.js HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:33 GMT
ETag: "3f64-59c0b11566040"
Accept-Ranges: bytes
Content-Length: 16228
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

crossbore.ngridsafety.com/SpryAssets/SpryValidationCheckbox.js

23.253.109.75

200 OK

16 kB

URL HTTP/1.1
crossbore.ngridsafety.com/SpryAssets/SpryValidationCheckbox.js
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text
Size
16 kB (15901 bytes)
Hash
7f2d80f44b9dd7ed658922968ec0adab
09f143b273081ab5371804e5fdb5fc9c4869f094
81b327a6f5634376ca4a83f58051912a8a8319e03fb3826be606065609bb6e4d

HTTP Headers

GET /SpryAssets/SpryValidationCheckbox.js HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:33 GMT
ETag: "3e1d-59c0b11566040"
Accept-Ranges: bytes
Content-Length: 15901
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

crossbore.ngridsafety.com/SpryAssets/SpryValidationTextField.js

23.253.109.75

200 OK

75 kB

URL HTTP/1.1
crossbore.ngridsafety.com/SpryAssets/SpryValidationTextField.js
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text, with very long lines (430)
Size
75 kB (75266 bytes)
Hash
cb5d591ab3ae137715aeeda1fba09ab6
546721b9fd09155dce7575afdf0b9d1769d62eed
c68f7f490ee04a990e47c93086b6eb344516546e94bccb0ed1f07e8b6424a8bf

Detections

Analyzer	Verdict	Alert
urlquery		Phishing website detected

HTTP Headers

GET /SpryAssets/SpryValidationTextField.js HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:32 GMT
ETag: "12602-59c0b11471e00"
Accept-Ranges: bytes
Content-Length: 75266
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

crossbore.ngridsafety.com/SpryAssets/SpryValidationRadio.css

23.253.109.75

200 OK

894 B

URL HTTP/1.1
crossbore.ngridsafety.com/SpryAssets/SpryValidationRadio.css
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
ASCII text
Size
894 B (894 bytes)
Hash
bfcd4f9af336fceca68341ee1332d8f6
79a1a4978f88245ef27fbfb036a98bd68c2d31ae
a66c6c39e2112c172d9d5a2d0be325d93d1c089ba4444fa019db982c9b89f8e9

HTTP Headers

GET /SpryAssets/SpryValidationRadio.css HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:26 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:32 GMT
ETag: "37e-59c0b11471e00"
Accept-Ranges: bytes
Content-Length: 894
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

crossbore.ngridsafety.com/images/logo-ngrid.png

23.253.109.75

200 OK

24 kB

URL HTTP/1.1
crossbore.ngridsafety.com/images/logo-ngrid.png
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
PNG image data, 536 x 212, 8-bit/color RGBA, non-interlaced\012- data
Size
24 kB (23832 bytes)
Hash
aeb57f9b17b11a11dc82a932c60ef0fe
0e23b3db4a3092a3ac5dc5d5610082ff98b2168c
7b7eb9c073333e6023bd98f4532c7b597cc0212271afcec761f64c7ef106ce8d

HTTP Headers

GET /images/logo-ngrid.png HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/css/site.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:27 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:36 GMT
ETag: "5d18-59c0b11842700"
Accept-Ranges: bytes
Content-Length: 23832
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

crossbore.ngridsafety.com/images/crossbore_diagram.jpg

23.253.109.75

200 OK

249 kB

URL HTTP/1.1
crossbore.ngridsafety.com/images/crossbore_diagram.jpg
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 920x699, components 3\012- data
Size
249 kB (248617 bytes)
Hash
3b9cd90dcf5f74504a5ac4bebe97038a
92e31701c64d6f4018e8afefe13cca9f7de15420
47dbfe621183bed4b14ad264d5f1a4aa70fc5845b88c8f0ff2c5db2e57a27066

HTTP Headers

GET /images/crossbore_diagram.jpg HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:27 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Fri, 01 Apr 2022 22:24:26 GMT
ETag: "3cb29-5db9f3dcb7d19"
Accept-Ranges: bytes
Content-Length: 248617
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

crossbore.ngridsafety.com/images/811-logo-vertical-white-text-1.png

23.253.109.75

200 OK

36 kB

URL HTTP/1.1
crossbore.ngridsafety.com/images/811-logo-vertical-white-text-1.png
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
PNG image data, 240 x 246, 8-bit/color RGBA, interlaced\012- data
Size
36 kB (36379 bytes)
Hash
ba0bc12145ca6286c39550e625f27446
2d39cfb2ba3ce188a88b85ff0bdcdfaff32a0063
9f0d461272f6e2a62f48a5e9d7cd3a425eb269bb58527f1f5ffacf5d8ab0f5b3

HTTP Headers

GET /images/811-logo-vertical-white-text-1.png HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:27 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:36 GMT
ETag: "8e1b-59c0b11842700"
Accept-Ranges: bytes
Content-Length: 36379
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

crossbore.ngridsafety.com/images/feature.jpg

23.253.109.75

200 OK

247 kB

URL HTTP/1.1
crossbore.ngridsafety.com/images/feature.jpg
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2560x775, components 3\012- data
Size
247 kB (247023 bytes)
Hash
d8bf2355f3c74c8b7240dda2fb6c7b85
52300eca8f1567768692968ed9db6404144780ee
b9c63224add4ad1febb13e9c9c7d9499938edb7381681e007808129d58242b82

HTTP Headers

GET /images/feature.jpg HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:27 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Fri, 01 Apr 2022 22:24:27 GMT
ETag: "3c4ef-5db9f3dd87d43"
Accept-Ranges: bytes
Content-Length: 247023
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ed1a966e9770807ef8b4f57a5113d29a
d843a3d371ee0424004f68ccc32ce06e6bc6e6c7
4932c01d3db39a9ac2f0f7e2693af95e5a334697edfd8d078fd52e421ba43721

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 19:40:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ssl.google-analytics.com/ga.js

142.250.74.168

200 OK

17 kB

URL HTTP/2
ssl.google-analytics.com/ga.js
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1305)
Size
17 kB (17168 bytes)
Hash
01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d

HTTP Headers

GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Wed, 14 Sep 2022 18:17:11 GMT
expires: Wed, 14 Sep 2022 20:17:11 GMT
cache-control: public, max-age=7200
age: 4996
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 19:40:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

crossbore.ngridsafety.com/favicon/favicon-16x16.png

23.253.109.75

200 OK

1.2 kB

URL HTTP/1.1
crossbore.ngridsafety.com/favicon/favicon-16x16.png
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
1.2 kB (1158 bytes)
Hash
8248714390b86cff813c6581fc42ad1b
27c1ed7effbb7e3e477f2bf01d7d5c77617f499c
cf4b050619e1cd65e8aee10d97b9c12b15f48cbcae2cd4c79609399922ffaf7d

HTTP Headers

GET /favicon/favicon-16x16.png HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:27 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:25 GMT
ETag: "486-59c0b10dc4e40"
Accept-Ranges: bytes
Content-Length: 1158
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png

crossbore.ngridsafety.com/favicon/android-icon-192x192.png

23.253.109.75

200 OK

6.9 kB

URL HTTP/1.1
crossbore.ngridsafety.com/favicon/android-icon-192x192.png
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size
6.9 kB (6945 bytes)
Hash
084671ddc6443f7f6dc84c1b8a5ba452
8bcf7cc187108b08c97d8ec396a0e71800081e7f
dc14d7b3d7555568df6173fe68ebc52a57e2ed4e264f495954e91824d82b893a

HTTP Headers

GET /favicon/android-icon-192x192.png HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:27 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Mon, 13 Jan 2020 20:10:26 GMT
ETag: "1b21-59c0b10eb9080"
Accept-Ranges: bytes
Content-Length: 6945
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

crossbore.ngridsafety.com/images/brochure.png

23.253.109.75

200 OK

293 kB

URL HTTP/1.1
crossbore.ngridsafety.com/images/brochure.png
IP
23.253.109.75:0
ASN
#33070 RMH-14

File type
PNG image data, 1650 x 955, 8-bit colormap, non-interlaced\012- data
Size
293 kB (293374 bytes)
Hash
5fb4e8490b8e5d722fc8f2dc2afb3419
ef2a7202a779ce9775391b6c70789d09a8348f51
3c6872c054b6f086c3600fa1303787c32f1c2a22fd7c241aa198e7b1aa5c0316

HTTP Headers

GET /images/brochure.png HTTP/1.1
Host: crossbore.ngridsafety.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 19:40:27 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000
Last-Modified: Fri, 01 Apr 2022 22:26:20 GMT
ETag: "479fe-5db9f449c429a"
Accept-Ranges: bytes
Content-Length: 293374
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5870
Expires: Wed, 14 Sep 2022 21:18:18 GMT
Date: Wed, 14 Sep 2022 19:40:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5870
Expires: Wed, 14 Sep 2022 21:18:18 GMT
Date: Wed, 14 Sep 2022 19:40:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5870
Expires: Wed, 14 Sep 2022 21:18:18 GMT
Date: Wed, 14 Sep 2022 19:40:28 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5870
Expires: Wed, 14 Sep 2022 21:18:18 GMT
Date: Wed, 14 Sep 2022 19:40:28 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg

34.120.237.76

200 OK

6.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.0 kB (5988 bytes)
Hash
f5befd5bb8e6d5dad2465be69d5a33e4
e5b46c3ca439a09950290cada1af5e27cede10f2
4dc0a3373fb4c1830c4e2420dddbcbe8dceecf10e969cbe8d02368e41207832c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5988
x-amzn-requestid: a0d81c7a-14e3-443d-8fb7-19241f06d3c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yaux0H77IAMF2_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f80b-0fe6fbbe75e891b925f88dc2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 1X79jBMZa4UQmWsLdg_QIg5MQeersp1O3iSgpKd6R2f8Kl7PAJh0hQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:49:32 GMT
etag: "e5b46c3ca439a09950290cada1af5e27cede10f2"
content-type: image/jpeg
age: 78656
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10138 bytes)
Hash
0789404fdbe3613d465d8fa89a63d7b8
0617d2e513097ca415a1d07cd39b1cb64d832ecf
80e55e383f354113c3694bbcc00fd1c544a97079bd3c462f1b90e952c0634bac

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10138
x-amzn-requestid: bdf798d9-6729-4363-a900-f32c4041d0c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YU5qsGZ-oAMFQ1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ea311-7b146c0620a83d5c00446f87;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 03:10:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OM9K72ukk0cuyR1ZcV5xWXnEd8U9OgeQi7bkCe0Pzn3BfdLMvSdSXg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 03:02:44 GMT
age: 59864
etag: "0617d2e513097ca415a1d07cd39b1cb64d832ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f033f00-b116-4419-9d21-3aed9c73ea2e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8764 bytes)
Hash
9d97e56f75165efcc71ae54952ded405
28d47359e70789115b2954b6c94711bb783b3c8c
564eac2ae99724e5f43aa1ae0afe4dec03697f888f51774e70e1b9c273c2d9d6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f033f00-b116-4419-9d21-3aed9c73ea2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8764
x-amzn-requestid: 5f78a61a-f4c3-4f15-80e6-5d3e3e0db46f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVa6AFvwoAMFyOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ed83f-3e0fa606132b3cfb771af58d;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 06:57:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kg7T9joYF6fwLTBPrmrAnWfzweJpRedkAlHkMoU5qOICjiElKHVkrQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:45:32 GMT
age: 75296
etag: "28d47359e70789115b2954b6c94711bb783b3c8c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

16 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
16 kB (15547 bytes)
Hash
56811a1a20a467464e1f3da171ef8b14
366b2090d409d694b72b4b4131df46dd65d69c5a
4c208fb88884166adf4ecc5882f75948b4a87d85c76ad6e7137e8edbd125c996

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 15547
x-amzn-requestid: a78f7d90-84c3-4198-88bf-1d722c37f09f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4EUDoAMF13A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-49535e5525606250306488ba;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yP22CSG5x3BVfq29UMdw30TZcvuaL-kUDgjBZDUEMpRVDWqlZrCgdQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:42:05 GMT
age: 79103
etag: "366b2090d409d694b72b4b4131df46dd65d69c5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.1 kB (6078 bytes)
Hash
f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ur-HTN2DS8b3ojSQldJOZi6YW2wtCwRfbGqxg49ZUJ_00hC_rFxYEw==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:51:32 GMT
age: 78536
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (14151 bytes)
Hash
fef8234ab83f6f8f8b29665f592cbc9f
a3e706d6309e4a9d7b293f2b9255f1550ba5e9b7
569c8c9736026fc310e148d4d74081e96a86245baaa1f784280d44a1cbd25ed0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14151
x-amzn-requestid: d5bc9be4-af3a-40fd-bfc9-1ac4769d2d3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4GhboAMF2dA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-375df72d2d67582635b9e4ae;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CZRpgjU_AxNYoyeSTOwhJhONl2DS4pvCLJ62RgAFp0flw-kPz3GkpQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:48:11 GMT
age: 78737
etag: "a3e706d6309e4a9d7b293f2b9255f1550ba5e9b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

104.18.11.207

200 OK

0 B

URL HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.18.11.207:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://crossbore.ngridsafety.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 14 Sep 2022 19:40:26 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 2021-03-10 20:26:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 121d365db7a9aba3915641185d93b963
cdn-cache: HIT
cf-cache-status: HIT
age: 12495233
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74ab9828cfcdb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations