Report - foundation.sptrm.com/index.html

Report Overview

Submitted URL
foundation.sptrm.com/index.html
IP
173.254.30.116
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2022-11-28 10:33:49
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	61 kB	34.120.237.76
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.5 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.161.148.163
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	1.4 kB	142.250.74.10
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	870 B	94 kB	216.58.207.195
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.36.76.226
foundation.sptrm.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	9.5 kB	1.1 MB	173.254.30.116
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-28	medium	foundation.sptrm.com/index.html	Malware
2022-11-28	medium	foundation.sptrm.com/js/hoverIntent.js	Malware
2022-11-28	medium	foundation.sptrm.com/js/superfish.js	Malware
2022-11-28	medium	foundation.sptrm.com/js/supersubs.js	Malware
2022-11-28	medium	foundation.sptrm.com/js/jquery.flexslider-min.js	Malware
2022-11-28	medium	foundation.sptrm.com/js/tinynav.min.js	Malware
2022-11-28	medium	foundation.sptrm.com/js/jquery-1.6.4.min.js	Malware
2022-11-28	medium	foundation.sptrm.com/js/custom.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	foundation.sptrm.com/index.html	411 B	2023-03-11	2023-03-11
Pretty URL foundation.sptrm.com/index.html IP 173.254.30.116 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:51:49 Last Seen2023-03-11 21:51:49 Times Seen1 Hash 763578332a482c0d43e2c9d1cd75e691 21d005b058beca73bf96a3eb90ccde930a6a524c a089f0efb7b4ba75b1e6f14f43fbd8aa422f1d21c3998c680743d1aa29e190c8 Loading...

	foundation.sptrm.com/js/jquery.flexslider-min.js	12 kB	2023-03-11	2023-03-11
Pretty URL foundation.sptrm.com/js/jquery.flexslider-min.js IP 173.254.30.116 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:51:49 Last Seen2023-03-11 21:51:49 Times Seen1 Hash 273e33893a6f75d66a0e451dab76193f 6e612429c36971522bff7a1dfe422dd3d238fa14 5fc0f50fe7bc7840768fd86ae03fd89b0744769aa749c18b618343fb6c9ed04d Loading...

	foundation.sptrm.com/js/jquery-1.6.4.min.js	92 kB	2023-03-11	2023-03-11
Pretty URL foundation.sptrm.com/js/jquery-1.6.4.min.js IP 173.254.30.116 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:51:49 Last Seen2023-03-11 21:51:49 Times Seen1 Hash 18f27bcbb9e93564dd5937d950adbd6d c978e5080e746f4fcd53c9b37ece510541c4f343 ea9903ca42826ff5c2dab0ddd51bf646e0471a0db29fc31ab05c443fbc304002 Loading...

	foundation.sptrm.com/js/hoverIntent.js	3.8 kB	2023-03-11	2023-03-11
Pretty URL foundation.sptrm.com/js/hoverIntent.js IP 173.254.30.116 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:51:49 Last Seen2023-03-11 21:51:49 Times Seen1 Hash 9b59afebd5145492a628c3898a0f8fe7 60deef22818ca6ad546b3fd19c2fcc46f493f3e6 aa1b85436b00058b6afabc121ea4075af141173508b67902fa7f882d9b01b859 Loading...

	foundation.sptrm.com/js/superfish.js	4.3 kB	2023-03-11	2023-03-11
Pretty URL foundation.sptrm.com/js/superfish.js IP 173.254.30.116 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:51:49 Last Seen2023-03-11 21:51:49 Times Seen1 Hash e35e4d3c34da407cb7d0138cc9d010ed 4385e8ededfa9124cb78dffcebccd8f4f12ffd97 f2fe45c14ac8cdb98507e10a3c0d10c97339b3f1b05dd012a917a3faa5fed0d9 Loading...

	foundation.sptrm.com/js/supersubs.js	3.9 kB	2023-03-11	2023-03-11
Pretty URL foundation.sptrm.com/js/supersubs.js IP 173.254.30.116 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:51:49 Last Seen2023-03-11 21:51:49 Times Seen1 Hash cf1c2906373888926e23c2936a3faeef 5e7b48168069c4a7a6150d9dadd53a37f05a88ba 371e05eebd5c1533426c8bda002585268999a63df0d1cc101fad3612804117d8 Loading...

	foundation.sptrm.com/js/tinynav.min.js	1.3 kB	2023-03-11	2023-03-11
Pretty URL foundation.sptrm.com/js/tinynav.min.js IP 173.254.30.116 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:51:49 Last Seen2023-03-11 21:51:49 Times Seen1 Hash 7903e152439444944fe95cab5f65a3f0 99b9c0eeed91f548380f8d3ce3b6c9517b477ac2 8fce49d93a44de3594530e36b51edf26214467683285607bd46da9bc8f648a75 Loading...

	foundation.sptrm.com/js/custom.js	2.8 kB	2023-03-11	2023-03-11
Pretty URL foundation.sptrm.com/js/custom.js IP 173.254.30.116 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:51:49 Last Seen2023-03-11 21:51:49 Times Seen1 Hash 51f3b50f1d18a03d0ef8c4bcb09b1611 79a0159aa059d233e575135f6cebd91dfd96f1f0 63da532efed87ffd15f44a72ca5d12a136bb10b02d09960ba94707f1b2406ee7 Loading...

HTTP Transactions (50)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6534
Expires: Mon, 28 Nov 2022 12:22:32 GMT
Date: Mon, 28 Nov 2022 10:33:38 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3568
Cache-Control: max-age=89823
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 10:33:38 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:30:41 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

foundation.sptrm.com/index.html

173.254.30.116

200 OK

4.3 kB

URL HTTP/1.1
foundation.sptrm.com/index.html
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (438)
Size
4.3 kB (4336 bytes)
Hash
f17f6d7e9c121c6ce1e45704835df3ef
c2db0f66f7244e41bae566a1e59ae85bde291a0d
e1be45c8f6c2683d5fc7a4bfac9424ab7f3d4b8b92ee04f06336dca29cfbd65e

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /index.html HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: nginx/1.21.6
Content-Type: text/html
Content-Length: 4336
Last-Modified: Mon, 23 May 2016 18:36:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-Server-Cache: true
X-Proxy-Cache: MISS
Accept-Ranges: bytes

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5311
Expires: Mon, 28 Nov 2022 12:02:09 GMT
Date: Mon, 28 Nov 2022 10:33:38 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 10:17:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 952
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: eMM4MegFox72mVKiDOs2vgTGxsm/7Gi2QlchMQdZYQY06/i2oEM3mkibkEn7hxXXdN12mbDn2c4=
x-amz-request-id: WTWSCXZMWC80D23T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 09:42:00 GMT
age: 3098
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 10:33:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:400italic,600italic,700italic,400,600,700

142.250.74.10

200 OK

881 B

URL HTTP/1.1
fonts.googleapis.com/css?family=Open+Sans:400italic,600italic,700italic,400,600,700
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
881 B (881 bytes)
Hash
0baf00f83a90a68c201629480f861bbc
204f8831498fd96db335a4f5cc81ebb9664c675c
53a6d7a119ed8a5335c83a8a69bf21187c65af0f95b22708e7237bdd0272cef3

HTTP Headers

GET /css?family=Open+Sans:400italic,600italic,700italic,400,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 28 Nov 2022 10:33:38 GMT
Date: Mon, 28 Nov 2022 10:33:38 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

foundation.sptrm.com/styles/skeleton.css

173.254.30.116

200 OK

2.3 kB

URL HTTP/1.1
foundation.sptrm.com/styles/skeleton.css
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
2.3 kB (2259 bytes)
Hash
f4b0867e13781332a1daf80665dd2c49
8cd5bb488d3079a6573f72034672005eabf60e4a
a63932c91f4e7cc7f434310a313135af792d5d611ada118a5518e2f8cd7e7c27

HTTP Headers

GET /styles/skeleton.css HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Tue, 16 Dec 2014 16:10:24 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2259
Content-Type: text/css

foundation.sptrm.com/styles/style.css

173.254.30.116

200 OK

8.5 kB

URL HTTP/1.1
foundation.sptrm.com/styles/style.css
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (484)
Size
8.5 kB (8476 bytes)
Hash
4434e34b92f8a67746bc02e579d8b171
90f5312465fd64666ade4f9fecd94b2b92b23599
dc6597d6e6b670a118587f20829c3eeb27b657a82437faef24fbdbc957607199

HTTP Headers

GET /styles/style.css HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Mon, 23 May 2016 18:37:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8476
Content-Type: text/css

foundation.sptrm.com/styles/color.css

173.254.30.116

200 OK

2.3 kB

URL HTTP/1.1
foundation.sptrm.com/styles/color.css
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
2.3 kB (2336 bytes)
Hash
c1e8cbb2fb3eb37856f830b1bef34767
0e76edac2b194b8ac10ef6ddb3528183a80b336e
e711f5b77458265bded90fdbd8daee81c04d67583b8394581f87825d3358711f

HTTP Headers

GET /styles/color.css HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Mon, 23 May 2016 18:37:06 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2336
Content-Type: text/css

foundation.sptrm.com/styles/flexslider.css

173.254.30.116

200 OK

1.4 kB

URL HTTP/1.1
foundation.sptrm.com/styles/flexslider.css
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
1.4 kB (1388 bytes)
Hash
0750956224221987d80f9997ffa4df66
ca34ef42f109f8bc9c0253ea003e52f1490df628
7a02a54b6e9a1044a974e16a2cd75b99afb3a09a7ee2a4b2cc725affe1c9fdb7

HTTP Headers

GET /styles/flexslider.css HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Tue, 16 Dec 2014 16:10:23 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1388
Content-Type: text/css

foundation.sptrm.com/styles/layout.css

173.254.30.116

200 OK

2.1 kB

URL HTTP/1.1
foundation.sptrm.com/styles/layout.css
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text
Size
2.1 kB (2105 bytes)
Hash
d22a11b05d76bd1d10621120371c9071
1fd32e8d36f21c8634efd44b9fef5e9ce45c1b60
29749634f8eec98f86054b2ac9759183d481a2dac9ed3763057e1d3486c45493

HTTP Headers

GET /styles/layout.css HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Mon, 23 May 2016 18:37:32 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2105
Content-Type: text/css

foundation.sptrm.com/js/hoverIntent.js

173.254.30.116

200 OK

1.7 kB

URL HTTP/1.1
foundation.sptrm.com/js/hoverIntent.js
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (638)
Size
1.7 kB (1702 bytes)
Hash
10cd7cf51c09dbf0d52e7d4e68d6ec17
d60f1190dab1f94c2f10211385513fc2eabfa182
c84b89e4adb2aab5829d68d7b19dbd4703c538869c648ca92d16bfb3a58f7e62

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/hoverIntent.js HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:27 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1702
Content-Type: application/javascript

foundation.sptrm.com/js/superfish.js

173.254.30.116

200 OK

2.0 kB

URL HTTP/1.1
foundation.sptrm.com/js/superfish.js
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (627)
Size
2.0 kB (1989 bytes)
Hash
41e2d5a7da2eb15b5862b104ab2b730a
849f1aba8e66e55832409141f4d72270fae5a18f
6d9f59eb2f5387c8a84b1f77e293b1e9a93725d35d559fe727ba19ee5b8a111d

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/superfish.js HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1989
Content-Type: application/javascript

fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2

216.58.207.195

200 OK

48 kB

URL HTTP/1.1
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Size
48 kB (47952 bytes)
Hash
17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd

HTTP Headers

GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foundation.sptrm.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 47952
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 22 Nov 2022 01:17:44 GMT
Expires: Wed, 22 Nov 2023 01:17:44 GMT
Cache-Control: public, max-age=31536000
Age: 551755
Last-Modified: Mon, 15 Aug 2022 18:22:41 GMT
Content-Type: font/woff2

fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.195

200 OK

45 kB

URL HTTP/1.1
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size
45 kB (44856 bytes)
Hash
565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db

HTTP Headers

GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://foundation.sptrm.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 21 Nov 2022 21:39:58 GMT
Expires: Tue, 21 Nov 2023 21:39:58 GMT
Cache-Control: public, max-age=31536000
Age: 564821
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT
Content-Type: font/woff2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 10:11:12 GMT
cache-control: public,max-age=3600
age: 1347
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

foundation.sptrm.com/js/supersubs.js

173.254.30.116

200 OK

2.0 kB

URL HTTP/1.1
foundation.sptrm.com/js/supersubs.js
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (627)
Size
2.0 kB (1984 bytes)
Hash
8fb3c4ce174e273c58a29eb4aaf1bed0
63407fc9d2ad9cc1db1463f078a6e0f38a9b7ac1
82688b2ea9b421fa23cca88dca42bf2dcbe1fb3a55dab2f83de6e3b8d0220a09

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/supersubs.js HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:29 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1984
Content-Type: application/javascript

foundation.sptrm.com/js/jquery.flexslider-min.js

173.254.30.116

200 OK

4.3 kB

URL HTTP/1.1
foundation.sptrm.com/js/jquery.flexslider-min.js
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (11768)
Size
4.3 kB (4339 bytes)
Hash
608a2cfef106069a039746d34a630a32
4ca4cd43c533c2f88ea60d7031f1fb0075acf2af
cc71a391862885461ef4435925e00d64f0de41815f5dc217edcbeb06d78b2902

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/jquery.flexslider-min.js HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4339
Content-Type: application/javascript

foundation.sptrm.com/js/tinynav.min.js

173.254.30.116

200 OK

752 B

URL HTTP/1.1
foundation.sptrm.com/js/tinynav.min.js
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (714)
Size
752 B (752 bytes)
Hash
7d7fa6ca2741d66e61c21f31389803cf
bb3d5e845651974d1f9cfdd9ae6fb5c65910b853
3a739836e6cdaa7182814a7ec9ad2926d9962d2486024119859a701bb803cd90

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/tinynav.min.js HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 752
Content-Type: application/javascript

foundation.sptrm.com/js/jquery-1.6.4.min.js

173.254.30.116

200 OK

40 kB

URL HTTP/1.1
foundation.sptrm.com/js/jquery-1.6.4.min.js
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32769)
Size
40 kB (40316 bytes)
Hash
17ef382f6c836ea0aeb1bf836e477374
39ba5d7f21afaaccd59c74fbf0e676324eb7d098
316409a3d60fb84a825225fcfe68bc27c79966161e29c45f427050d1d7adc239

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/jquery-1.6.4.min.js HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade
Last-Modified: Tue, 16 Dec 2014 16:09:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked
Content-Type: application/javascript

foundation.sptrm.com/images/logo.png

173.254.30.116

200 OK

21 kB

URL HTTP/1.1
foundation.sptrm.com/images/logo.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 270 x 121, 8-bit/color RGBA, non-interlaced\012- data
Size
21 kB (21203 bytes)
Hash
b595c53b573fa87379665d92bedb5330
bece20f90bedb86d09e3ee44e79b08a1158945d7
a81d0d54c6b90218e80117ea0b57d3a53499d67dce5320b8d3e93d6de9dc5f89

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:08:54 GMT
Accept-Ranges: bytes
Content-Length: 21203
Content-Type: image/png

foundation.sptrm.com/js/custom.js

173.254.30.116

200 OK

1.3 kB

URL HTTP/1.1
foundation.sptrm.com/js/custom.js
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
ASCII text, with very long lines (627)
Size
1.3 kB (1250 bytes)
Hash
94cf67f36d60716328728c0477f5b5ab
0adb60752c44f0e1b1edbba71c517d2e40f885fb
0e1562536822ed368490f640c3ddb156faebfc044351a216182ccd4088c56944

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/custom.js HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1250
Content-Type: application/javascript

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4109
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 10:33:39 GMT
Last-Modified: Mon, 28 Nov 2022 09:25:10 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

foundation.sptrm.com/images/bg_navitem.png

173.254.30.116

200 OK

145 B

URL HTTP/1.1
foundation.sptrm.com/images/bg_navitem.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 1 x 66, 8-bit/color RGB, non-interlaced\012- data
Size
145 B (145 bytes)
Hash
0aa3273809eab55356d047813d3ef3b7
7d8fde97d07da5ce9d1d5241258e7bdfb3f77d1c
413dde3343226ddce87c2193c015abb08c58f7098ddd5fd5fa7097dfd01d1d1f

HTTP Headers

GET /images/bg_navitem.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/styles/color.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:08:51 GMT
Accept-Ranges: bytes
Content-Length: 145
Content-Type: image/png

foundation.sptrm.com/images/bg_outerslider.png

173.254.30.116

200 OK

128 B

URL HTTP/1.1
foundation.sptrm.com/images/bg_outerslider.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced\012- data
Size
128 B (128 bytes)
Hash
eb9b3eb2096f85c7e07a81516f85eaa1
f47fd865a4c46467195a0d3ff2a9a5b866ed7119
0fa58974c18415e76b6bdbec0987d2bad26932a7d50569df661732f9363f3a3c

HTTP Headers

GET /images/bg_outerslider.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/styles/color.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:08:52 GMT
Accept-Ranges: bytes
Content-Length: 128
Content-Type: image/png

foundation.sptrm.com/images/bg_outerfootersidebar.png

173.254.30.116

200 OK

127 B

URL HTTP/1.1
foundation.sptrm.com/images/bg_outerfootersidebar.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 6 x 6, 8-bit/color RGBA, non-interlaced\012- data
Size
127 B (127 bytes)
Hash
1a4a55d050b9ea62f41266ea2719be55
c454ae6f2537d3bea27976b87cf72caf829a77ea
956f8f2ee0903599f47463a57b4cb5e748eeef8585a44636ecc9a2cce357a82e

HTTP Headers

GET /images/bg_outerfootersidebar.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/styles/color.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:08:52 GMT
Accept-Ranges: bytes
Content-Length: 127
Content-Type: image/png

push.services.mozilla.com/

35.161.148.163

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.161.148.163:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6OgcD0OPuMJgfXDzNbYpYQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DbgQZgkOe9YloooX1DVAqpf4Twk=

foundation.sptrm.com/images/bg_slidermap.png

173.254.30.116

200 OK

46 kB

URL HTTP/1.1
foundation.sptrm.com/images/bg_slidermap.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 804 x 418, 8-bit/color RGBA, non-interlaced\012- data
Size
46 kB (45679 bytes)
Hash
13e2c17f9725d5e4046419b435b7554b
c0deaee9f2d82ab4e1e554f21ca37257a5b5519b
5da8114d5059b9a111eeb3ccfc483412504447a1f8206e9fed88b1f5fbcaf777

HTTP Headers

GET /images/bg_slidermap.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/styles/style.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:08:52 GMT
Accept-Ranges: bytes
Content-Length: 45679
Content-Type: image/png

foundation.sptrm.com/images/content/organization.jpg

173.254.30.116

200 OK

123 kB

URL HTTP/1.1
foundation.sptrm.com/images/content/organization.jpg
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=198, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=410], baseline, precision 8, 410x198, components 3\012- data
Size
123 kB (123035 bytes)
Hash
dbc6bffe696df7c214f3f0d2d481f9b9
1d2e9b4766e3448aac38ca8ae15ed34f3730488c
0f1fb3249c88b056424fea2a566b511aa342d0a196256268a09492d0ff7d3edc

HTTP Headers

GET /images/content/organization.jpg HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:04 GMT
Accept-Ranges: bytes
Content-Length: 123035
Content-Type: image/jpeg

foundation.sptrm.com/images/content/pic1.jpg

173.254.30.116

200 OK

73 kB

URL HTTP/1.1
foundation.sptrm.com/images/content/pic1.jpg
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=198, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=410], baseline, precision 8, 410x198, components 3\012- data
Size
73 kB (73232 bytes)
Hash
5485f1b520914681551c5d0ec3d10be6
48fd78c3c96ca759926e42ac186bb05472632f85
87334cfd18b75bb6aa832418300032993f47b37c057a4e21d962510916cd8f11

HTTP Headers

GET /images/content/pic1.jpg HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:06 GMT
Accept-Ranges: bytes
Content-Length: 73232
Content-Type: image/jpeg

foundation.sptrm.com/images/content/spec_logo.jpg

173.254.30.116

200 OK

45 kB

URL HTTP/1.1
foundation.sptrm.com/images/content/spec_logo.jpg
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2013:12:17 12:46:21], baseline, precision 8, 200x143, components 3\012- data
Size
45 kB (45272 bytes)
Hash
8762e4ed0c1ba5ff1c04fa4a904a4883
bd72e7a673fbd6f2e5f5726d8653e38e69cb9f12
94065ae2b49446f4b3960651dbb37353f86b3198c65c4c8e9aa5621d17cd9f52

HTTP Headers

GET /images/content/spec_logo.jpg HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:14 GMT
Accept-Ranges: bytes
Content-Length: 45272
Content-Type: image/jpeg

foundation.sptrm.com/images/content/slide4.png

173.254.30.116

200 OK

39 kB

URL HTTP/1.1
foundation.sptrm.com/images/content/slide4.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 941 x 479, 8-bit/color RGBA, non-interlaced\012- data
Size
39 kB (38985 bytes)
Hash
d5414e8b472922f74c0ee5396ecf8236
1c2c0736d8501959d7b0dd25fb4a366f68d85595
b73dbb2a2c6b8b0ae41cd1d6e9e8d80dc4b364c0ab1ccfd60e1ee33778762d4e

HTTP Headers

GET /images/content/slide4.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:40 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:13 GMT
Accept-Ranges: bytes
Content-Length: 38985
Content-Type: image/png

foundation.sptrm.com/images/content/slide2.png

173.254.30.116

200 OK

324 kB

URL HTTP/1.1
foundation.sptrm.com/images/content/slide2.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 941 x 479, 8-bit/color RGBA, non-interlaced\012- data
Size
324 kB (323774 bytes)
Hash
e13c6f4b125d83d832a8f641f07cdcf6
264b56ca573451baad252b7471a2073d6711b22a
af8576c5c3e35cd95997b9c6ee5b16244b240818d58c3affa8c6344773ef56d6

HTTP Headers

GET /images/content/slide2.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:12 GMT
Accept-Ranges: bytes
Content-Length: 323774
Content-Type: image/png

foundation.sptrm.com/images/content/pic3.jpg

173.254.30.116

200 OK

120 kB

URL HTTP/1.1
foundation.sptrm.com/images/content/pic3.jpg
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=198, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=410], baseline, precision 8, 410x198, components 3\012- data
Size
120 kB (119842 bytes)
Hash
62a80a4492e5d3b72f7d21bb40b7be9b
0af76cc8d96d9045a7a9814d74073e660a8c33de
98b44a73c40957031c7dbf65276670e0c7d86e9bc4e9cbcc6857e82445730093

HTTP Headers

GET /images/content/pic3.jpg HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:39 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:07 GMT
Accept-Ranges: bytes
Content-Length: 119842
Content-Type: image/jpeg

foundation.sptrm.com/images/content/slide1.png

173.254.30.116

200 OK

226 kB

URL HTTP/1.1
foundation.sptrm.com/images/content/slide1.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 941 x 479, 8-bit/color RGBA, non-interlaced\012- data
Size
226 kB (225812 bytes)
Hash
41f6a6447bdf05e234bcb7edbb6f41e0
3f557bc0b8ff09d71ca9861ec3262305b6c008e0
cbf4b1f94f9b760e11f99ea3c99e7737666b1cadfbd7a8d95f7d199994e23445

HTTP Headers

GET /images/content/slide1.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:40 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:09:11 GMT
Accept-Ranges: bytes
Content-Length: 225812
Content-Type: image/png

foundation.sptrm.com/images/apple-touch-icon-114x114.png

173.254.30.116

200 OK

1.6 kB

URL HTTP/1.1
foundation.sptrm.com/images/apple-touch-icon-114x114.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 114 x 114, 8-bit/color RGBA, non-interlaced\012- data
Size
1.6 kB (1602 bytes)
Hash
43ac37c0dbcda07ec5036283a3429a1a
de6322b66a6bb1f7f67319925445a9bac208ec5b
a3428eeba34123d8e22d8c0081365560552489aa34c7d55444247020ff2c4d40

HTTP Headers

GET /images/apple-touch-icon-114x114.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:40 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:08:50 GMT
Accept-Ranges: bytes
Content-Length: 1602
Content-Type: image/png

foundation.sptrm.com/favicon.ico

173.254.30.116

200 OK

10 kB

URL HTTP/1.1
foundation.sptrm.com/favicon.ico
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
MS Windows icon resource - 1 icon, 49x49, 32 bits/pixel\012- data
Size
10 kB (10058 bytes)
Hash
624b18f5c52f29ad89076a10bad745cf
74e9f5a127bdbda06d2b6964548b5242a931890b
9eb082d9636e34af9d164e5c0eb7105097f693df85e1975e6992523fcef1d44c

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/index.html

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:41 GMT
Server: nginx/1.21.6
Content-Type: image/x-icon
Content-Length: 10058
Last-Modified: Tue, 16 Dec 2014 16:08:46 GMT
Cache-Control: max-age=604800
Expires: Sun, 04 Dec 2022 07:28:06 GMT
X-Server-Cache: true
X-Proxy-Cache: HIT
Accept-Ranges: bytes

foundation.sptrm.com/images/flex-prev.png

173.254.30.116

200 OK

579 B

URL HTTP/1.1
foundation.sptrm.com/images/flex-prev.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 13 x 18, 8-bit/color RGBA, non-interlaced\012- data
Size
579 B (579 bytes)
Hash
8bd7a6b835e2d9df311d585af2293cb3
f60c0491cd30126a9c8c998e72faaa4f4f616e9a
b3c1845b3882f14a02dc0700d5bef7da45a1a77549b930e21766a37d86518bbd

HTTP Headers

GET /images/flex-prev.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/styles/flexslider.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:40 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:08:53 GMT
Accept-Ranges: bytes
Content-Length: 579
Content-Type: image/png

foundation.sptrm.com/images/flex-next.png

173.254.30.116

200 OK

611 B

URL HTTP/1.1
foundation.sptrm.com/images/flex-next.png
IP
173.254.30.116:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type
PNG image data, 13 x 18, 8-bit/color RGBA, non-interlaced\012- data
Size
611 B (611 bytes)
Hash
b3c1c8a3e9072a9e6c2353f7bd8a224a
bad513a899892182482dab4bac3bbb6652632a58
9a3ab4a33798586c17999518b3ab03319f5943da5f9b1fc2ad3b1e19bb512987

HTTP Headers

GET /images/flex-next.png HTTP/1.1
Host: foundation.sptrm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://foundation.sptrm.com/styles/flexslider.css

HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 10:33:40 GMT
Server: Apache
Last-Modified: Tue, 16 Dec 2014 16:08:53 GMT
Accept-Ranges: bytes
Content-Length: 611
Content-Type: image/png

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3053
Expires: Mon, 28 Nov 2022 11:24:34 GMT
Date: Mon, 28 Nov 2022 10:33:41 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3053
Expires: Mon, 28 Nov 2022 11:24:34 GMT
Date: Mon, 28 Nov 2022 10:33:41 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3053
Expires: Mon, 28 Nov 2022 11:24:34 GMT
Date: Mon, 28 Nov 2022 10:33:41 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9430 bytes)
Hash
1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 45145
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8885 bytes)
Hash
3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEFSeIAMF3rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:11:39 GMT
age: 8522
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11165 bytes)
Hash
a8935783026c10470f60033d3a860f7b
65941dd34eb1063a3f7fe2b6790a11a484a06b9a
e88c706458faf5b5512212692392c7c1a0d8e60af62962267166f5cb60ee9c89

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd56dccc9-321b-431e-8a92-49471e788b4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11165
x-amzn-requestid: 9e35d865-adea-4d2a-b20f-beb014cdd42f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_JE2VIAMFYgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-7cf4db38152cdfa1448cba3d;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: SFO5-C3, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lu-Pi2xJUPfkpTK0vCDauedxSM1ZrNzEKka2-4m6l7pDkt04gUgpnA==
via: 1.1 dec8fa38a453902521b941c7cd70d33c.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:40 GMT
etag: "65941dd34eb1063a3f7fe2b6790a11a484a06b9a"
content-type: image/jpeg
age: 45421
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74165307-11fe-455f-9c90-106d24a6495f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6498 bytes)
Hash
1bb306213437ea24ab879adc9e3b6da4
771d38e18cdfa54052f7cb150b73c03154eb4368
d4cce7533fd59ef11fb8fec4bc114d5be0bacaa9134e3f1536e0d6bac1f58ffb

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74165307-11fe-455f-9c90-106d24a6495f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6498
x-amzn-requestid: 2499eb0e-74c9-4c04-ba58-3e65fc452c34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR8IwHU4oAMFaAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383da37-12f14e7a30bc1a75499cb272;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:44:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: m5GSRli35fewn4l-k0jyFEcru1VKJlDYddCrLEpp5YiQwaLXsXsQDw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:02:23 GMT
age: 45078
etag: "771d38e18cdfa54052f7cb150b73c03154eb4368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6376 bytes)
Hash
78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 45135
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12555 bytes)
Hash
f20d5c4b208740dd4c737b9d95c0e1d0
c843c5422499736a83a80c2b07475a8dbbb8860f
f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KcI_BV4rZkM-2CmcFI5qkJLT-OOwYQnRNEPXrQJvlNA9A3Da0EzgEA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 45757
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations