Report - top-conttent.com/0d1b1e1d-3fae-41ce-9d46-6cab1311073a

Report Overview

Submitted URL
top-conttent.com/0d1b1e1d-3fae-41ce-9d46-6cab1311073a
IP
18.193.209.105
ASN
#16509 AMAZON-02
Submitted
2022-09-04 20:24:28
Access
public
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
top-conttent.com	749485	2019-11-21T13:32:03Z	2023-02-03T19:12:42Z	372 B	1.4 kB	18.193.209.105
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-17T05:09:04Z	758 B	2.7 kB	143.204.55.115
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-17T05:10:35Z	321 B	229 B	34.117.237.239
littlecdn.com	11785	2019-06-04T12:44:02Z	2023-03-17T06:06:00Z	863 B	9.6 kB	104.22.24.116
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-17T05:10:36Z	594 B	127 B	34.218.168.248
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-17T05:09:15Z	3.2 kB	67 kB	34.120.237.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-17T05:09:02Z	1.6 kB	4.4 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-17T05:10:36Z	401 B	5.8 kB	143.204.55.35
glbltraffic.com	995815	2020-11-10T13:16:33Z	2023-03-11T15:39:57Z	3.0 kB	722 B	64.227.11.5
static.steessay.com	unknown	2022-06-02T21:33:32Z	2023-02-28T22:33:23Z	452 B	7.4 kB	139.45.197.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-04	medium	top-conttent.com/0d1b1e1d-3fae-41ce-9d46-6cab1311073a	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf	1.8 kB	2023-03-07	2023-04-02
Pretty URL glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf IP 64.227.11.5 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:02 Last Seen2023-04-02 21:32:48 Times Seen2 Hash 93a9203ef45b4b4d6903bea1cdf399a0 fba9d78231e479662a214f6192236233b1af16d3 360ebeaddf1a6a4b5d29623d668ae2fbc0e94eab9d40a3b0d94e6ae5f6ae2def Loading...

	glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf	358 B	2023-03-07	2023-04-17
Pretty URL glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf IP 64.227.11.5 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:02 Last Seen2023-04-17 00:56:25 Times Seen11 Hash 0e3d0b0d1e6eec347084ed5006928f20 cb1622346a2c21a015e64c16cfc302bbce4623da 56442cbc3d77d95e93f2c2aab32111741aedd2e37b6ea3394f6aa8c4b3b0212f Loading...

	glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf	2.7 kB	2023-03-07	2023-03-17
Pretty URL glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf IP 64.227.11.5 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:02 Last Seen2023-03-17 12:48:00 Times Seen1 Hash 4b816051558b27be2acfc44da9231825 688e143d4a9f8fe5c43812e999e57bdb3cadd0a3 ed08797e28d2a76ba5391cec0362379d13f7033fb3c279efccbce570ce2cdbea Loading...

HTTP Transactions (23)

URL IP Response Size

top-conttent.com/0d1b1e1d-3fae-41ce-9d46-6cab1311073a

18.193.209.105

302

0 B

URL HTTP/1.1
top-conttent.com/0d1b1e1d-3fae-41ce-9d46-6cab1311073a
IP
18.193.209.105:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /0d1b1e1d-3fae-41ce-9d46-6cab1311073a HTTP/1.1
Host: top-conttent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 
Server: nginx
Date: Sun, 04 Sep 2022 20:24:17 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf
Pragma: no-cache
Set-Cookie: 0d1b1e1d-3fae-41ce-9d46-6cab1311073a-v4=RL577g7lgm3vdvMMt4CAWr1KFrHYBox10jzJspRxFK4; Max-Age=86400; Expires=Mon, 05-Sep-2022 20:24:17 GMT; Domain=top-conttent.com; Path=/; HttpOnly
cep-v4=lru7TBYVT-CEfTfUvGchVF9XUgz9aklF1uve4ayvqa0H_lDvuRHpjETaeBvMQ7J-WxWkmGApeZv12F5_Dh7lXxpSc4mq2OD9T1pBpAzblg9ksVDLMz-byOUppj5gz8wLt6bGSijzsRnspWUFVo6x50IlXNGod1cTWyc2bm_9VfiInBNLoKUKULFzslBLzKNZ_aJf0FH8w9Sd9DmE2p3cQDaLoxYrLqRfJN2f49dIwxRjtWuM47_PkZHvQly1DgEcenAfllh4BKOi9psfZYKPi8RhTkjepAETAJIgijzKNfRHhKgZYwvprfJzqDmQGFnhrNt_S9uav5BzobUtMvAHqvd38FGKLQUq1b66UsV3UZ4; Max-Age=86400; Expires=Mon, 05-Sep-2022 20:24:17 GMT; Domain=top-conttent.com; Path=/; HttpOnly

firefox.settings.services.mozilla.com/v1/

143.204.55.115

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 19:44:19 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9z61LqkmDIkWzo1MkNGqekcn8-GP_EjDNEFCO-ETC56nYk06xDr-Fg==
Age: 2398

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12659
Expires: Sun, 04 Sep 2022 23:55:16 GMT
Date: Sun, 04 Sep 2022 20:24:17 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.35

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GB6wYvnpzmbgvTRtuPHKmTyeEpaM2wlTY4uKeFWwSInbtMGxJ8GcPA==
age: 68940
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 20:24:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.115

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 04 Sep 2022 19:38:16 GMT
Expires: Sun, 04 Sep 2022 20:06:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JaEDHhvc4HbG81QEqtR4OWOFuilo-ozyYuU0-RpclAq21HTRBXSLsg==
Age: 2762

littlecdn.com/apps/templates/android-instructions/ios-sys-msg-icon/css/style.css?v=1.2

104.22.24.116

200 OK

1.8 kB

URL HTTP/2
littlecdn.com/apps/templates/android-instructions/ios-sys-msg-icon/css/style.css?v=1.2
IP
104.22.24.116:0
ASN
#13335 CLOUDFLARENET

File type
assembler source, ASCII text
Size
1.8 kB (1842 bytes)
Hash
ec0ba382d76ac745c4da4fd1ac483e21
c522aead252d5e109c40d7c4b0c9269550a7f6bb
e0e9f0dc963f485d9254653c67f91b720c21bd61e9c9325188b7991c786a2802

HTTP Headers

GET /apps/templates/android-instructions/ios-sys-msg-icon/css/style.css?v=1.2 HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://glbltraffic.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 04 Sep 2022 20:24:18 GMT
content-type: text/css
last-modified: Sat, 03 Sep 2022 17:07:15 GMT
vary: Accept-Encoding
etag: W/"631389c3-1525"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 5421
server: cloudflare
cf-ray: 745972abbcb0b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2

glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf&mprtr=1

64.227.11.5

405 Method Not Allowed

157 B

URL HTTP/2
glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf&mprtr=1
IP
64.227.11.5:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
157 B (157 bytes)
Hash
9a195a70e70e9d54a539462cab45087b
bee155a3e187603fe3bf676b3148d217de78daf0
a57d68810785990f171ed207811b7bd359248759135e43b2bde3020d235254d1

HTTP Headers

POST /je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf&mprtr=1 HTTP/1.1
Host: glbltraffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://glbltraffic.com
Connection: keep-alive
Referer: https://glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

HTTP/2 405 Method Not Allowed
server: nginx/1.16.1
date: Sun, 04 Sep 2022 20:24:18 GMT
content-type: text/html
content-length: 157
X-Firefox-Spdy: h2

littlecdn.com/apps/contents/s/4a/2c/19/36c444996f735c0696006f92fd/034723420638.png

104.22.24.116

200 OK

6.3 kB

URL HTTP/2
littlecdn.com/apps/contents/s/4a/2c/19/36c444996f735c0696006f92fd/034723420638.png
IP
104.22.24.116:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Size
6.3 kB (6308 bytes)
Hash
4a2c1936c444996f735c0696006f92fd
14bd6f11317d3196371cb9302c2cea39e86fc609
585e926709c767219ddfed37ee10f83ff1306cba64079f6e3e013f658fb05f1a

HTTP Headers

GET /apps/contents/s/4a/2c/19/36c444996f735c0696006f92fd/034723420638.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://glbltraffic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sun, 04 Sep 2022 20:24:18 GMT
content-type: image/png
content-length: 6308
last-modified: Fri, 18 Jun 2021 16:24:26 GMT
etag: "60ccc8ba-18a4"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 745972abbcacb51e-OSL
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6ce297a03eeb7fa69799e29116705adf
c747eea809ab1812f5a9615a6e344bc3c2a3cefb
13543d8e32d17a9ac2193b3cb80f2f06c9a447909e9e02b6eff8aa3f0910633e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "13543D8E32D17A9AC2193B3CB80F2F06C9A447909E9E02B6EFF8AA3F0910633E"
Last-Modified: Sat, 03 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5851
Expires: Sun, 04 Sep 2022 22:01:49 GMT
Date: Sun, 04 Sep 2022 20:24:18 GMT
Connection: keep-alive

static.steessay.com/templates/_assets/sounds/blip1/default.mp3

139.45.197.153

206 Partial Content

6.7 kB

URL HTTP/2
static.steessay.com/templates/_assets/sounds/blip1/default.mp3
IP
139.45.197.153:0
ASN
#9002 RETN Limited

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Size
6.7 kB (6712 bytes)
Hash
6422f23e1751d74410347e02c0210a60
0e3e65be6b5fbb76f6a52191e973bd37368be204
4fdb5a03ae3f26e801517144609db3589bd0835a686fe11dfe7afddcdb750ef8

HTTP Headers

GET /templates/_assets/sounds/blip1/default.mp3 HTTP/1.1
Host: static.steessay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://glbltraffic.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 206 Partial Content
server: nginx
date: Sun, 04 Sep 2022 20:24:18 GMT
content-type: audio/mpeg
content-length: 6712
last-modified: Sat, 03 Sep 2022 17:07:15 GMT
etag: "631389c3-1a38"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-range: bytes 0-6711/6712
X-Firefox-Spdy: h2

push.services.mozilla.com/

34.218.168.248

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.218.168.248:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DdXy0ChxvonnAFUektysWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9otepdgh6lrHj8Arp+osi8t2mWo=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2938
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 20:24:20 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2938
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 20:24:20 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2938
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 20:24:20 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11380 bytes)
Hash
fc4ceb10dd9fcaab21ae58dcf10c401f
6ce530af682094dc5413db9de02565691fab4da7
84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: s0voKdiDdj0mq8-VRFSWcYcQXaWti7929bpdKSQMWDoVCmOAPepuDg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:57 GMT
age: 59723
etag: "6ce530af682094dc5413db9de02565691fab4da7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9690 bytes)
Hash
1bdfdf7e36f78f2f0e4d7ede9fdb76a8
babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:41 GMT
age: 81159
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10713 bytes)
Hash
8cdd0826b7d8be62cc2ed532e04e137b
383a0661fa09d9b48745b507389d0505303b6182
f2d04cf1ee9b5a885c246060c1036b21af4ecd3e51e5d05a529dbe0d63f7c2ac

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10713
x-amzn-requestid: d546a12c-c549-4ad3-80ad-6bad452927d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5winGzHIAMFTPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7aa-2060c6611eb4abb777cc17a8;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rnd2mdQQcKzRP5RAJXmcJUSmO_AnlUgVrkT5tBR38PtfK_bThFBTtg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:47:53 GMT
age: 81387
etag: "383a0661fa09d9b48745b507389d0505303b6182"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5652 bytes)
Hash
10318189f33f071dda64249ab9c8c5bb
e5b5b649a243e5c004d9923d19d4421d1ea96d23
3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oU-qOKW_Jy8MV0HLQWofKsOi_qseUcyZRoP5LoyLsCclpCgf6NHiBA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:02:43 GMT
age: 80497
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8688 bytes)
Hash
6bb4b1d74f1443bc3328301ab3ae6464
2768253dacaaad6cb498c6b2eb7694208b0ce0a6
07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: 1c5fbc89-8ce8-4792-b713-f2c0ceeab737
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifFJYoAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-214311e155c661ff77d89906;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wd9SF3txQNTVUaSPcKQ_nQfPt1pBjFbuHzSZiQjfbGBSb-i7J8Rgjg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:44:29 GMT
age: 81591
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

15 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
15 kB (14855 bytes)
Hash
ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tR9oeUGtH0NFZdnZj93V6HysPnKOTJhhiEOTNwYdq-4xIzeBZblrhA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 06:53:46 GMT
age: 48634
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

glbltraffic.com/favicon.ico

64.227.11.5

404 Not Found

0 B

URL HTTP/2
glbltraffic.com/favicon.ico
IP
64.227.11.5:0
ASN
#14061 DIGITALOCEAN-ASN

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: glbltraffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
server: nginx/1.16.1
date: Sun, 04 Sep 2022 20:24:18 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

64.227.11.5

200 OK

0 B

URL HTTP/2
glbltraffic.com/je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf
IP
64.227.11.5:0
ASN
#14061 DIGITALOCEAN-ASN

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /je5id/index.html?brand=Desktop&model=Desktop&clickid=&cep=8Za4Yn3fiiNnvjfINxf6KyHj80n15UbLvcrWSwbbs74Q7pc4C2kgwA002tsRSE9TOcQz4EyLxO9NIrXqr8QxrrpcdwwcaJtA_WvA7NlU_5zjQFGyfMtnROU8mV9kkZG1gFmUf9JjrTKNYlQF8-TXuTtJnk9-T7YivTqGg104YtUQBp3vKzFxJBQQUB33zQxg6zW0aMv7kkKtUV_Kmt4nWusNtmEzk-dd-yqZpL_I-_mhYGpZLBSM4xgOlwp4scSZlLFBfFHn3g90acxU7_OopefvyHUFyGXHvF37g6W-7oKP2yM8lJrfxH9AUs3IsxOnsuVlHA0X7AnYvuEIIykXXOFB8O3FByYl0GuQHYKbYwk&lptoken=16aa624332b2486457bf HTTP/1.1
Host: glbltraffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
server: nginx/1.16.1
date: Sun, 04 Sep 2022 20:24:18 GMT
content-type: text/html
last-modified: Mon, 09 May 2022 10:55:17 GMT
etag: W/"6278f315-2524"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (23)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type