Overview

URLuser-mtb01.hufeer.ir/login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso=
IP 212.33.195.109 (Iran)
ASN#43754 Asiatech Data Transmission company
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-28 01:13:06 UTC
StatusLoading report..
IDS alerts0
Blocklist alert7
urlquery alerts
1
Phishing - M&T Bank
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-27 05:29:56 UTC 34.102.187.140
nexus.ensighten.com (1) 2786 2012-05-23 18:34:00 UTC 2022-07-25 21:30:27 UTC 54.230.111.63
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 54.187.71.185
asset.mtb.com (1) 246397 2018-06-20 04:36:38 UTC 2020-04-12 15:50:42 UTC 143.204.55.12
user-mtb01.hufeer.ir (8) 0 2022-06-29 16:16:04 UTC 2022-11-28 00:34:05 UTC 212.33.195.109 Unknown ranking
r3.o.lencr.org (7) 344 No data No data 23.36.76.226
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-27 05:29:57 UTC 34.117.237.239
ocsp.entrust.net (8) 1208 2014-01-10 02:18:45 UTC 2020-04-24 21:44:37 UTC 104.110.10.32
resources.mtb.com (8) 144011 2014-11-08 14:57:30 UTC 2020-02-13 20:43:22 UTC 24.75.29.77
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-28 2 user-mtb01.hufeer.ir/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cb (...) Phishing
2022-11-28 2 user-mtb01.hufeer.ir/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cb (...) Phishing
2022-11-28 2 user-mtb01.hufeer.ir/ruxitagentjs_ICA2SVfhjqrux_10205201218101503.js Phishing
2022-11-28 2 user-mtb01.hufeer.ir/Assets/scripts/Login/Index.js Phishing
2022-11-28 2 user-mtb01.hufeer.ir/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cb (...) Phishing
2022-11-28 2 user-mtb01.hufeer.ir/ruxitagentjs_ICA2SVfhjqrux_10205201218101503.js Phishing
2022-11-28 2 user-mtb01.hufeer.ir/Assets/scripts/Login/Index.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 212.33.195.109
Date UQ / IDS / BL URL IP
2023-01-04 17:40:19 +0000 0 - 0 - 1 user-mtb01.hufeer.ir/login.php?online_id=4610 (...) 212.33.195.109
2023-01-04 17:39:30 +0000 0 - 0 - 1 www.user-mtb01.hufeer.ir/login.php?online_id= (...) 212.33.195.109
2023-01-04 17:39:29 +0000 0 - 0 - 1 user-mtb01.hufeer.ir/login.php?online_id=cdfb (...) 212.33.195.109
2023-01-04 17:36:18 +0000 0 - 0 - 1 www.user-mtb01.hufeer.ir/login.php?online_id= (...) 212.33.195.109
2023-01-04 17:36:10 +0000 0 - 0 - 1 user-mtb01.hufeer.ir/login.php?online_id=05b2 (...) 212.33.195.109


Last 5 reports on ASN: Asiatech Data Transmission company
Date UQ / IDS / BL URL IP
2023-02-04 11:24:50 +0000 0 - 2 - 0 ir31.uploadboy.com/d/tkfx7vshp749/rnnnmvgijdf (...) 185.49.85.25
2023-02-04 08:51:04 +0000 0 - 0 - 49 mahamchoob.com/ 185.147.160.180
2023-02-04 01:16:41 +0000 0 - 0 - 16 185.99.215.159/ 185.99.215.159
2023-02-03 21:39:25 +0000 0 - 3 - 2 37.156.146.163/PUB/Cisco/Voice/CUCM/12.5/UCSI (...) 37.156.146.163
2023-02-02 22:25:00 +0000 0 - 1 - 0 dl2.soft98.ir/soft/s/SysTweak.Advanced.Driver (...) 185.112.33.122


Last 5 reports on domain: hufeer.ir
Date UQ / IDS / BL URL IP
2023-01-04 17:40:19 +0000 0 - 0 - 1 user-mtb01.hufeer.ir/login.php?online_id=4610 (...) 212.33.195.109
2023-01-04 17:39:30 +0000 0 - 0 - 1 www.user-mtb01.hufeer.ir/login.php?online_id= (...) 212.33.195.109
2023-01-04 17:39:29 +0000 0 - 0 - 1 user-mtb01.hufeer.ir/login.php?online_id=cdfb (...) 212.33.195.109
2023-01-04 17:36:18 +0000 0 - 0 - 1 www.user-mtb01.hufeer.ir/login.php?online_id= (...) 212.33.195.109
2023-01-04 17:36:10 +0000 0 - 0 - 1 user-mtb01.hufeer.ir/login.php?online_id=05b2 (...) 212.33.195.109


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-05 20:39:31 +0000 1 - 1 - 4 www.malayaleebusiness.com/mtb/login.php?onlin (...) 208.91.199.152
2023-02-05 18:38:03 +0000 1 - 1 - 6 gleesoncivil.com.au/mtbd/M&T/login.php?online (...) 116.0.23.225
2023-02-05 15:39:25 +0000 1 - 1 - 5 gleesoncivil.com.au/mtbd/M&T/login.php?online (...) 116.0.23.225
2023-02-05 14:39:39 +0000 1 - 1 - 3 www.malayaleebusiness.com/mtb/login.php?onlin (...) 208.91.199.152
2023-02-05 14:39:39 +0000 13 - 9 - 0 mtbiz-auth.3utilities.com/login.php?online_id (...) 164.92.89.54

JavaScript

Executed Scripts (3)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (46)


Request Response
                                        
                                            GET /login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso= HTTP/1.1 
Host: user-mtb01.hufeer.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         212.33.195.109
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Cache-Control: public, max-age=0
Expires: Mon, 28 Nov 2022 01:12:55 GMT
Content-Length: 4798
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 28 Nov 2022 01:12:55 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (960), with CRLF line terminators
Size:   4798
Md5:    d9d3b9129013d7c03caa960e39f0344d
Sha1:   b61db46f8e8e7406f0414ff9f12a59605fd068d0
Sha256: 0208b343f1f505560ddc01fefda5c50c04b0a6609cd52c0cf3f1ca1f58980c60
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4028
Expires: Mon, 28 Nov 2022 02:20:03 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3413
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 01:12:55 GMT
Last-Modified: Mon, 28 Nov 2022 00:16:02 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19458
Expires: Mon, 28 Nov 2022 06:37:13 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 00:17:44 GMT
cache-control: public,max-age=3600
age: 3311
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    567df7db606cf5d0871aa5bc9311b6da
Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17
Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: qdbcFTDsdcevqh5GiTp7Rh1gtTMVskVYd4gk4SMNkBpppDOi5ETPWWGXzAc03Skc7ozVGVga3iQ=
x-amz-request-id: QA5VQ3YZ6EZ14ACE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 00:44:50 GMT
age: 1685
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 28 Nov 2022 01:12:55 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=17 HTTP/1.1 
Host: user-mtb01.hufeer.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso=

search
                                         212.33.195.109
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 708
Date: Mon, 28 Nov 2022 01:12:55 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   708
Md5:    2382378378c002d88b9a507c712c3349
Sha1:   2e894db3808b554abadc8b144338ad9e2ea937ba
Sha256: 37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=9 HTTP/1.1 
Host: user-mtb01.hufeer.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso=

search
                                         212.33.195.109
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 708
Date: Mon, 28 Nov 2022 01:12:55 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   708
Md5:    2382378378c002d88b9a507c712c3349
Sha1:   2e894db3808b554abadc8b144338ad9e2ea937ba
Sha256: 37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ruxitagentjs_ICA2SVfhjqrux_10205201218101503.js HTTP/1.1 
Host: user-mtb01.hufeer.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso=

search
                                         212.33.195.109
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 708
Date: Mon, 28 Nov 2022 01:12:55 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   708
Md5:    2382378378c002d88b9a507c712c3349
Sha1:   2e894db3808b554abadc8b144338ad9e2ea937ba
Sha256: 37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /Assets/scripts/Login/Index.js HTTP/1.1 
Host: user-mtb01.hufeer.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso=

search
                                         212.33.195.109
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 708
Date: Mon, 28 Nov 2022 01:12:55 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   708
Md5:    2382378378c002d88b9a507c712c3349
Sha1:   2e894db3808b554abadc8b144338ad9e2ea937ba
Sha256: 37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=17 HTTP/1.1 
Host: user-mtb01.hufeer.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso=

search
                                         212.33.195.109
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 708
Date: Mon, 28 Nov 2022 01:12:55 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   708
Md5:    2382378378c002d88b9a507c712c3349
Sha1:   2e894db3808b554abadc8b144338ad9e2ea937ba
Sha256: 37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ruxitagentjs_ICA2SVfhjqrux_10205201218101503.js HTTP/1.1 
Host: user-mtb01.hufeer.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso=

search
                                         212.33.195.109
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 708
Date: Mon, 28 Nov 2022 01:12:55 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   708
Md5:    2382378378c002d88b9a507c712c3349
Sha1:   2e894db3808b554abadc8b144338ad9e2ea937ba
Sha256: 37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "9D2E1D5A3DC8AB5CF30DFF4DB334BDEE4C1D313C7AACE61B01C78E3816A27827"
Last-Modified: Sun, 27 Nov 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2913
Expires: Mon, 28 Nov 2022 02:01:28 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    833cb769cbf5e923889f451601fd529c
Sha1:   e9cfdb0ae31debb73470c487a492058188957762
Sha256: 9d2e1d5a3dc8ab5cf30dff4db334bdee4c1d313c7aace61b01c78e3816a27827
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "9D2E1D5A3DC8AB5CF30DFF4DB334BDEE4C1D313C7AACE61B01C78E3816A27827"
Last-Modified: Sun, 27 Nov 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2847
Expires: Mon, 28 Nov 2022 02:00:22 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    833cb769cbf5e923889f451601fd529c
Sha1:   e9cfdb0ae31debb73470c487a492058188957762
Sha256: 9d2e1d5a3dc8ab5cf30dff4db334bdee4c1d313c7aace61b01c78e3816a27827
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "9D2E1D5A3DC8AB5CF30DFF4DB334BDEE4C1D313C7AACE61B01C78E3816A27827"
Last-Modified: Sun, 27 Nov 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2913
Expires: Mon, 28 Nov 2022 02:01:28 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    833cb769cbf5e923889f451601fd529c
Sha1:   e9cfdb0ae31debb73470c487a492058188957762
Sha256: 9d2e1d5a3dc8ab5cf30dff4db334bdee4c1d313c7aace61b01c78e3816a27827
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "9D2E1D5A3DC8AB5CF30DFF4DB334BDEE4C1D313C7AACE61B01C78E3816A27827"
Last-Modified: Sun, 27 Nov 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2847
Expires: Mon, 28 Nov 2022 02:00:22 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    833cb769cbf5e923889f451601fd529c
Sha1:   e9cfdb0ae31debb73470c487a492058188957762
Sha256: 9d2e1d5a3dc8ab5cf30dff4db334bdee4c1d313c7aace61b01c78e3816a27827
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "4207AC9D817181B8410F4AD5DA4F8AEF8A09D81E31F8D7C9C20EA44F36A4622D"
Last-Modified: Sun, 27 Nov 2022 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1222
Expires: Mon, 28 Nov 2022 01:33:17 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    64c9bafd283acc3bac068e3300a76f76
Sha1:   2fd6a99404107ced57ff0f02ce655ff26c3a81be
Sha256: 4207ac9d817181b8410f4ad5da4f8aef8a09d81e31f8d7c9c20ea44f36a4622d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "4207AC9D817181B8410F4AD5DA4F8AEF8A09D81E31F8D7C9C20EA44F36A4622D"
Last-Modified: Sun, 27 Nov 2022 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1214
Expires: Mon, 28 Nov 2022 01:33:09 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    64c9bafd283acc3bac068e3300a76f76
Sha1:   2fd6a99404107ced57ff0f02ce655ff26c3a81be
Sha256: 4207ac9d817181b8410f4ad5da4f8aef8a09d81e31f8d7c9c20ea44f36a4622d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "4207AC9D817181B8410F4AD5DA4F8AEF8A09D81E31F8D7C9C20EA44F36A4622D"
Last-Modified: Sun, 27 Nov 2022 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1222
Expires: Mon, 28 Nov 2022 01:33:17 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    64c9bafd283acc3bac068e3300a76f76
Sha1:   2fd6a99404107ced57ff0f02ce655ff26c3a81be
Sha256: 4207ac9d817181b8410f4ad5da4f8aef8a09d81e31f8d7c9c20ea44f36a4622d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "4207AC9D817181B8410F4AD5DA4F8AEF8A09D81E31F8D7C9C20EA44F36A4622D"
Last-Modified: Sun, 27 Nov 2022 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1214
Expires: Mon, 28 Nov 2022 01:33:09 GMT
Date: Mon, 28 Nov 2022 01:12:55 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    64c9bafd283acc3bac068e3300a76f76
Sha1:   2fd6a99404107ced57ff0f02ce655ff26c3a81be
Sha256: 4207ac9d817181b8410f4ad5da4f8aef8a09d81e31f8d7c9c20ea44f36a4622d
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 01:08:54 GMT
cache-control: public,max-age=3600
age: 241
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2648
Cache-Control: max-age=117484
Date: Mon, 28 Nov 2022 01:12:56 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 09:51:00 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /r/simple-layout-responsive/css.mtb?v=08132020140516 HTTP/1.1 
Host: resources.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         24.75.29.77
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Expires: Tue, 28 Nov 2023 01:12:56 GMT
Last-Modified: Mon, 28 Nov 2022 01:12:55 GMT
ETag: "1669597976:dtagent10253221019152312ShlF"
Vary: User-Agent
X-Srv: B-SC-01
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1745029987"
Date: Mon, 28 Nov 2022 01:12:55 GMT
ntCoent-Length: 258715
Cache-Control: private
Content-Encoding: gzip
Set-Cookie: dtCookie=v_4_srv_2_sn_01777A3B7E95EF0818AAD43D68921EEC_perc_100000_ol_0_mul_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; Path=/; Domain=.mtb.com TS019299a7=01fb46a9263b39bb66d30ae1a6c67ecc292c8a88ae6d8d956819a64829a69e32a8a099062b214d154ee12087686a1b23eca24526f1; Path=/ TS0128739d=01fb46a9262b9dd8a2127aea0c463291c7d9e097056d8d956819a64829a69e32a8a099062bcf952f8959756d21ef366ecaf435548f149d1ddb9264c510d04983bfae3833e6; path=/; domain=.mtb.com TSea15929a027=0856addebbab20000d70b89eb4959f03711b8a170602fc7c9f950bdcabc8566ff5e9e0b2d05eb61408f1da7667113000b63e6cf7c35300d8d8e6afb3d3adbb88472a75fb4a6116ddeebe558b82f4cd8a84e72c7fabd3ce381a99be803b825190; Path=/
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size:   34708
Md5:    612ef637c25041c445e4fdf710694d70
Sha1:   c4037320ef3bf75754dbba6ffbb712cc8ea947cd
Sha256: d3f9b1bf0a23fba1044ec913042d5068e3445fe37aa9dc4ad2dff2b9fbcfbeef
                                        
                                            GET /mtbank/OE-Prod/Bootstrap.js HTTP/1.1 
Host: nexus.ensighten.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/

search
                                         54.230.111.63
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 15
Connection: keep-alive
Date: Mon, 28 Nov 2022 01:12:57 GMT
x-amz-replication-status: COMPLETED
Last-Modified: Fri, 22 Jul 2022 23:48:01 GMT
ETag: "ffe905f50d9b47e6353b68513c4d48ac"
x-amz-server-side-encryption: AES256
Cache-Control: no-cache, no-store
x-amz-version-id: aoJA4xuOoFemAhjg4lZAdeni.2iMq5FL
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hgQAWi6F9uFFA2xRRJ-6mRbKx5518hhmXJMRdDHNWq43mYnPaohTdg==


--- Additional Info ---
Magic:  ASCII text
Size:   15
Md5:    ffe905f50d9b47e6353b68513c4d48ac
Sha1:   d2c2ee4201cca3be67abf771ed1f1922fa94d083
Sha256: c0d8671e209f009f9c1ad8153222f942087ec193b7e87f856e60971bd5424633
                                        
                                            GET /Assets/img/mtb-logo.svg HTTP/1.1 
Host: resources.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         24.75.29.77
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Last-Modified: Tue, 15 Nov 2022 08:29:20 GMT
Accept-Ranges: bytes
ETag: "0b0865bccf8d81:0"
X-Srv: B-SC-01
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-411973808"
Date: Mon, 28 Nov 2022 01:12:55 GMT
Content-Length: 2039
Set-Cookie: TSea15929a027=0856addebbab20005012525c9719719f6d1890a1d4c1ac638d88168502af84e225ee8dae3644e41f082fe4b90211300027a3ca68afe8b0c1d8e6afb3d3adbb88d57ca2b3696d1110ab6022a78a72ac30a1ebdcfc88bff838b6311799d15b8588; Path=/


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2039), with no line terminators
Size:   2039
Md5:    f2b901cf895852a0866fe4a16c7f1730
Sha1:   c4240af1ec798477b4e65a185ddbb1b038817da4
Sha256: 5f5b0d9f678fe446631a33a4cbbe891a01b0ed972143702e67ae6617367096ac
                                        
                                            GET /Assets/img/mtb-equalhousinglender.svg HTTP/1.1 
Host: resources.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         24.75.29.77
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Last-Modified: Tue, 15 Nov 2022 08:29:20 GMT
Accept-Ranges: bytes
ETag: "0b0865bccf8d81:0"
X-Srv: B-SC-01
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="30228168"
Date: Mon, 28 Nov 2022 01:12:55 GMT
Content-Length: 230
Set-Cookie: TSea15929a027=0856addebbab200035fa65ed82ed107f3f71145f4a0133a7d2810c97e814dff04751c32c007993a00879e2478d113000727cbd1113907c20d8e6afb3d3adbb889541588eb79eaf45d1c039e0e09fb09299706b5267395872c849eaf5afaa91d0; Path=/


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   230
Md5:    916635d10512ae6a1840614a895dcd38
Sha1:   db175de4c42281bb4d239c57d1b95b8e75c529ec
Sha256: d58eb2802f72d0c6b1d944a1335e8fb914af44b51fe16097aad994c15b8cfbad
                                        
                                            GET /Assets/img/mtb-entrust.svg HTTP/1.1 
Host: resources.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         24.75.29.77
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Last-Modified: Tue, 15 Nov 2022 08:29:20 GMT
Accept-Ranges: bytes
ETag: "0b0865bccf8d81:0"
X-Srv: B-SC-01
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1958424945"
Date: Mon, 28 Nov 2022 01:12:55 GMT
Content-Length: 1349
Set-Cookie: TSea15929a027=0856addebbab2000ab1e3575084d6b3701feea1a7f7358f8a03431dec1a8fa590417556736ccf13508b7a9ffe7113000c1c8972b98b5d348d8e6afb3d3adbb88ca30f7ba768d48532e1878532216af4b66c33bf51d62690850dde371ad027d88; Path=/


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1349), with no line terminators
Size:   1349
Md5:    9a569ad20708d7453d89fe6c72e7fcdc
Sha1:   60b6a41620583484642f7c826faf8e3c879a6374
Sha256: b2ef3bd17aa6bc2daa7b1209f7848b30c64f3068e43162b09a216639ab430ce5
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: n67xdLfrBqdclsMdoLQoPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.187.71.185
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0ngvjbauI6tCQajcRH84/AXOg5E=

                                        
                                            GET /r/simple-layout-responsive/js.mtb?v=08132020140516 HTTP/1.1 
Host: resources.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         24.75.29.77
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Expires: Tue, 28 Nov 2023 01:12:56 GMT
Last-Modified: Mon, 28 Nov 2022 01:12:55 GMT
ETag: "1669597976:dtagent10253221019152312ShlF"
Vary: User-Agent
X-Srv: B-SC-01
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Server-Timing: dtSInfo;desc="0", dtRpid;desc="220457673"
Date: Mon, 28 Nov 2022 01:12:55 GMT
Cteonnt-Length: 322405
Cache-Control: private
Content-Encoding: gzip
Set-Cookie: dtCookie=v_4_srv_9_sn_B8E10C89B083A1FE634D1D923F0C2EEE_perc_100000_ol_0_mul_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; Path=/; Domain=.mtb.com TS019299a7=01fb46a926e051922e0420fe41e5f8717919f104216715bd890c0284ed60b9c769f4ca17908131d5b2d7e6b3d6b636a27e01ac2f5a; Path=/ TS0128739d=01fb46a9268b237e756fd3cfcc5e7786fc21e479d76715bd890c0284ed60b9c769f4ca17906309f9139e4de4ef76a4351c228efceaae2a8cb37457c3faa6c1ebb890dfb6d9; path=/; domain=.mtb.com TSea15929a027=0856addebbab20009b4a4354b25350c1c5fa8a0ba5e0652a817e041e7880e85e625ebd2a5ae45b6d08070ccb7711300019d075db065c4c1fd8e6afb3d3adbb8840ccfae4816bbceee43eb5019dd47f27556957d0a76c66bd94989c59b24d6a6a; Path=/
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   103531
Md5:    727a0de3144aa33cd4534796486e2363
Sha1:   86ed4f75d976f4f5974724a6a19723798f29386e
Sha256: 4944e8c395c12a394fb7be2e85d249d24381a5848f743a5d63bf2b0edda3bcdc
                                        
                                            GET /Assets/scripts/Login/Index.js HTTP/1.1 
Host: user-mtb01.hufeer.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/login.php?online_id=4faceb3cd09281450aefd5e46&country=&iso=

search
                                         212.33.195.109
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Connection: Keep-Alive
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 708
Date: Mon, 28 Nov 2022 01:12:56 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   708
Md5:    2382378378c002d88b9a507c712c3349
Sha1:   2e894db3808b554abadc8b144338ad9e2ea937ba
Sha256: 37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/fonts/mandtpg-iconfont.woff HTTP/1.1 
Host: resources.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://user-mtb01.hufeer.ir
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         24.75.29.77
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
                                        
Last-Modified: Tue, 15 Nov 2022 08:29:19 GMT
Accept-Ranges: bytes
ETag: "0b0865bccf8d81:0:dtagent10253221019152312ShlF"
X-Srv: B-SC-01
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2037595784", dtTao;desc="1"
Date: Mon, 28 Nov 2022 01:12:56 GMT
Content-Length: 4776
Set-Cookie: dtCookie=v_4_srv_2_sn_FD1E85ABEF5C772E81A73FA7BE0F6646_perc_100000_ol_0_mul_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; Path=/; Domain=.mtb.com TS019299a7=01fb46a92663a5095da7626d11dc8480f363b86df5c99a5ba3cfe1251bb905f8fb895d7f554fd8cae682a1a33850b0c1c966f8816d; Path=/ TS0128739d=01fb46a92679b5a0d6b3b6f32588444810857215cdc99a5ba3cfe1251bb905f8fb895d7f5532918266007e065e4ad2ce1492348b3e39a97d5f412bf8876a6daaee71ca79c2; path=/; domain=.mtb.com TSea15929a027=0856addebbab20007a77695666dec36f08845b607ab6f24edfade82ef9bd32d2598e946f3f58769c0851270ff3113000086473fe014aa122d8e6afb3d3adbb8814a1f0384254256be6d19cbae57b0365efcd0232da7b2ddfc4bd0297027acdd7; Path=/


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 4776, version 1.0\012- data
Size:   4776
Md5:    ac13691b89191d11d0e5577eb3cf3d53
Sha1:   0126fa82c0ab022e61b5de74f1fe3e204a905a7b
Sha256: 108d16421ae2ff7fc5157d507dc5b1bf7f62140ba58cf3c723b1f2b7e74c21df
                                        
                                            GET /assets/fonts/mandtbaltoweb-medium.woff HTTP/1.1 
Host: resources.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://user-mtb01.hufeer.ir
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         24.75.29.77
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
                                        
Last-Modified: Tue, 15 Nov 2022 08:29:19 GMT
Accept-Ranges: bytes
ETag: "0b0865bccf8d81:0:dtagent10253221019152312ShlF"
X-Srv: B-SC-01
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1310199834", dtTao;desc="1"
Date: Mon, 28 Nov 2022 01:12:56 GMT
Content-Length: 64318
Set-Cookie: dtCookie=v_4_srv_1_sn_D24E9C0717C7FD462AF679C313D93138_perc_100000_ol_0_mul_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; Path=/; Domain=.mtb.com TS019299a7=01fb46a926d92e8a19f912a9319c3d3ad2137425682ca7f8b52a5e87c375d253b6ba47043a682afcab5eacb7120a49719639bac92a; Path=/ TS0128739d=01fb46a926fa618631ba41f34d77469c280eb920142ca7f8b52a5e87c375d253b6ba47043aa80d21b936c059306b598afcc498003f2ffd4cebf99987fdf743543bee9ded78; path=/; domain=.mtb.com TSea15929a027=0856addebbab20009805d40c2b166786a1119953489bf29d347dab43a3ede2f54b406900b597c0520855e7b3141130000963223a310fcf90d8e6afb3d3adbb8838fa150819f1902a00940171e34bc9a4d74fb4d69b15667e4a7d210ffa447c99; Path=/


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 64318, version 1.0\012- data
Size:   64318
Md5:    b245a55f7e33e1cf4d2477570936ef84
Sha1:   12bf1c1eda6db246778f7c343acebbaad8fa36f4
Sha256: b391b55f950528937beee7687717a4aef81196817834f1c93b099713ff738fbc
                                        
                                            GET /assets/fonts/mandtbaltoweb-book.woff HTTP/1.1 
Host: resources.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://user-mtb01.hufeer.ir
Connection: keep-alive
Referer: https://resources.mtb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         24.75.29.77
HTTP/1.1 200 OK
Content-Type: APPLICATION/X-WOFF
                                        
Last-Modified: Tue, 15 Nov 2022 08:29:19 GMT
Accept-Ranges: bytes
ETag: "0b0865bccf8d81:0:dtagent10253221019152312ShlF"
X-Srv: B-SC-01
Access-Control-Allow-Origin: *
X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/
Timing-Allow-Origin: *
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1467394322", dtTao;desc="1"
Date: Mon, 28 Nov 2022 01:12:56 GMT
Content-Length: 67671
Set-Cookie: dtCookie=v_4_srv_11_sn_31FB4AF36CDC504D270E1D915364DF8A_perc_100000_ol_0_mul_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_1; Path=/; Domain=.mtb.com TS019299a7=01fb46a926bb46384338efe2e57c622ec1a1569e7b449f59c96af21df8f2c56f6595e9a65d080e60bca0337b18567ac4ad111e9cdb; Path=/ TS0128739d=01fb46a92686730cb26538e8f8504833bc0cda68e1449f59c96af21df8f2c56f6595e9a65d7ebfd4f70a330806a7b6d71223e40050a82ded3cf95446c0fda7b6b9115aab81; path=/; domain=.mtb.com TSea15929a027=0856addebbab20008c9d2118d4c8c8e1351be0ffe217d267d1d19fdf48bb118c56a85b5b0e6c8b64081c2c860d113000c7d6df0abd70c906d8e6afb3d3adbb88e5dbd93cdfeb22703259c0c32509775f590feb9ae43d0dec60ff1c3354db7970; Path=/


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 67671, version 1.0\012- data
Size:   67671
Md5:    6cd469e8613d82d4d07834a5ca7745f0
Sha1:   95347ba0a03d27e1aa91bc17c937d8aefe53e6ff
Sha256: 4029a5a081992259f4e529190b49dbba893931da4e843dd203449f1b9a4509d2
                                        
                                            GET /Documents/html/homepage/favicon.ico HTTP/1.1 
Host: asset.mtb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://user-mtb01.hufeer.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.12
HTTP/2 200 OK
content-type: image/x-icon
                                        
content-length: 14862
accept-ranges: bytes
cache-control: max-age=3600, no-cache="set-cookie"
content-disposition: inline
content-encoding: gzip
date: Mon, 28 Nov 2022 00:34:11 GMT
last-modified: Wed, 04 May 2022 18:18:59 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-content-type-options: nosniff
x-dispatcher: dispatcher2useast1
x-frame-options: SAMEORIGIN
x-vhost: publish
etag: "3dce-5de33a8b9cac0-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SIvBJYmK44ICM-9xZJhhX0pjKzoJR0F35kV1PmdqJ3bvdYaTIvAMAg==
age: 2326
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data
Size:   14862
Md5:    e82f458a5c1c5353a97401eccc925613
Sha1:   949d6c8d06ca14b52f496c20f63fae269b6708c2
Sha256: cd320f6e4a5ccfb2d08a5aca1d42dc606530d63e3d779038c41865c85568cbf3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Mon, 28 Nov 2022 02:20:22 GMT
Date: Mon, 28 Nov 2022 01:12:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Mon, 28 Nov 2022 02:20:22 GMT
Date: Mon, 28 Nov 2022 01:12:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Mon, 28 Nov 2022 02:20:22 GMT
Date: Mon, 28 Nov 2022 01:12:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Mon, 28 Nov 2022 02:20:22 GMT
Date: Mon, 28 Nov 2022 01:12:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Mon, 28 Nov 2022 02:20:22 GMT
Date: Mon, 28 Nov 2022 01:12:57 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 11471
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F17eed5ca-e7b1-43be-b937-69356fce9d8a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4708
x-amzn-requestid: 6efd15cd-c944-42e7-8142-01360fbe4a25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_JFbXIAMFc_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-3c7d91eb7a2f3a9669f89d88;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6FSZ3Zw-s95LlrU3skAr5_g6m36c9SQ9_6vA3HFbMKYTTFzJRBJ76w==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:26:43 GMT
age: 9974
etag: "a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4708
Md5:    4060284252d32701c42e2df4a83970a0
Sha1:   a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da
Sha256: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11165
x-amzn-requestid: 9e35d865-adea-4d2a-b20f-beb014cdd42f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_JE2VIAMFYgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-7cf4db38152cdfa1448cba3d;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: SFO5-C3, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4YRocKXYUOkfho0bEHNX0xMxhhKNH2Cm3XtQDtQK7x2dFOsipPjfCw==
via: 1.1 dec8fa38a453902521b941c7cd70d33c.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:26:45 GMT
age: 9972
etag: "65941dd34eb1063a3f7fe2b6790a11a484a06b9a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11165
Md5:    a8935783026c10470f60033d3a860f7b
Sha1:   65941dd34eb1063a3f7fe2b6790a11a484a06b9a
Sha256: e88c706458faf5b5512212692392c7c1a0d8e60af62962267166f5cb60ee9c89
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: up0DWugUp4S0jAtsA-KBRapBAHtcHCdTwWJock-y22fqyL6_YVFeqg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:09 GMT
age: 12108
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12555
Md5:    f20d5c4b208740dd4c737b9d95c0e1d0
Sha1:   c843c5422499736a83a80c2b07475a8dbbb8860f
Sha256: f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5989
x-amzn-requestid: db10fcc5-80ab-4650-af49-d5afe36706f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78LHQqIAMF9_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e7-4cbd19e3227894844807742c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A5n6y1-hpgr4vynnRXkEZNvCvjlNGH6brl7eYMsdN1MST7YoD2BPgA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:13 GMT
age: 12104
etag: "21aa6418f3a0d2b64925b66d5fb9079b7e84a11c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5989
Md5:    fa848cb85e85df184b078fe7aa95ae52
Sha1:   21aa6418f3a0d2b64925b66d5fb9079b7e84a11c
Sha256: 37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10813
x-amzn-requestid: 5a3c9584-1389-45ac-968d-0a2301f82eda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KG00oAMFpig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-6ffc3ff67f7f7e75399834e8;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3ggibSv4guzAQjW77yMg7HTp5JCBi1B9dxXi-Zy_-Vw0b6lP1PAGyQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:09 GMT
age: 12108
etag: "238a7439d887fb3aa7f1302eeb43fce62f08441a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10813
Md5:    005e5ba3c9588cf389a58195001b64e3
Sha1:   238a7439d887fb3aa7f1302eeb43fce62f08441a
Sha256: d75dd5b6f57d9c9290725c5be76cc7d7a39682ca569bea18eceb9bdc13d444f9