r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a39c6b0123e56e5b89743a8ad25c746e
feb61559594a73b319532dec130f10068fdf1242
d1adf9c8c7e63c33674a6af4b4111fe0ce1092d362ca4bf7c7dd00e6b6034f09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1ADF9C8C7E63C33674A6AF4B4111FE0CE1092D362CA4BF7C7DD00E6B6034F09"
Last-Modified: Thu, 02 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11721
Expires: Sat, 04 Mar 2023 04:55:08 GMT
Date: Sat, 04 Mar 2023 01:39:47 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cf3bd7bf954753a40867593f59828a19
8812b6b5e4e0725e3a5a7700be3ef0b4c3db4e24
d74374d27bbe6df8c6d8f7da2e5db0e0b07efb07a711131b500bc66a12594b88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D74374D27BBE6DF8C6D8F7DA2E5DB0E0B07EFB07A711131B500BC66A12594B88"
Last-Modified: Thu, 02 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3565
Expires: Sat, 04 Mar 2023 02:39:12 GMT
Date: Sat, 04 Mar 2023 01:39:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Retry-After, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Mar 2023 01:08:24 GMT
content-type: application/json
age: 1883
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e4e8aac6a39cada76c87582702f7c378
0260b5087dc89bc06032583627bc84109646561e
de8102626e7960652e844be721ec8336927886d18957a52474e4bc31a7c1a83b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE8102626E7960652E844BE721EC8336927886D18957A52474E4BC31A7C1A83B"
Last-Modified: Thu, 02 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11566
Expires: Sat, 04 Mar 2023 04:52:33 GMT
Date: Sat, 04 Mar 2023 01:39:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: JBOSKRZ2sf2evoARE5D1WMu7bZO/jotxSikA7zMIUNpzezddUuQJ8edbUvJBfR+P9J1b1dRCN7SuMEHKRbnYPQ==
x-amz-request-id: 3TKY92FG5C4P6GQ7
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Mar 2023 01:33:44 GMT
age: 363
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Mar 2023 01:39:47 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Last-Modified, Retry-After, Expires, Pragma, Content-Length, Cache-Control, Alert, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Mar 2023 01:12:26 GMT
age: 1641
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ae3a34d88aadc877a7cd4bde2ce637f9
1f2721cd0fcf74835ecbea57506f0f9dd369f62c
bba70e7ce85b81a6ca0346956ea2021e29cf94ec13023fa75bd0a7fec943eb18
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BBA70E7CE85B81A6CA0346956EA2021E29CF94EC13023FA75BD0A7FEC943EB18"
Last-Modified: Thu, 02 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11644
Expires: Sat, 04 Mar 2023 04:53:51 GMT
Date: Sat, 04 Mar 2023 01:39:47 GMT
Connection: keep-alive
push.services.mozilla.com/
52.41.153.123101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.153.123:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jS5zbLhC+xWwLb0/mmNpYw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Qix45Ihms2PRyWUWM6bnQzITcek=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 16d5f84e59c07ed63d44e8f2b7fb7cdd
13d26cbcc3521c23110ecda9c38b5330de7f82d1
91aa320b6d0d19587bc36ae8c88457428fed9ab91e18031a5d9a30c49654069e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91AA320B6D0D19587BC36AE8C88457428FED9AB91E18031A5D9A30C49654069E"
Last-Modified: Thu, 02 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3428
Expires: Sat, 04 Mar 2023 02:36:57 GMT
Date: Sat, 04 Mar 2023 01:39:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 16d5f84e59c07ed63d44e8f2b7fb7cdd
13d26cbcc3521c23110ecda9c38b5330de7f82d1
91aa320b6d0d19587bc36ae8c88457428fed9ab91e18031a5d9a30c49654069e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91AA320B6D0D19587BC36AE8C88457428FED9AB91E18031A5D9A30C49654069E"
Last-Modified: Thu, 02 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3428
Expires: Sat, 04 Mar 2023 02:36:57 GMT
Date: Sat, 04 Mar 2023 01:39:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 16d5f84e59c07ed63d44e8f2b7fb7cdd
13d26cbcc3521c23110ecda9c38b5330de7f82d1
91aa320b6d0d19587bc36ae8c88457428fed9ab91e18031a5d9a30c49654069e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91AA320B6D0D19587BC36AE8C88457428FED9AB91E18031A5D9A30C49654069E"
Last-Modified: Thu, 02 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3428
Expires: Sat, 04 Mar 2023 02:36:57 GMT
Date: Sat, 04 Mar 2023 01:39:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 16d5f84e59c07ed63d44e8f2b7fb7cdd
13d26cbcc3521c23110ecda9c38b5330de7f82d1
91aa320b6d0d19587bc36ae8c88457428fed9ab91e18031a5d9a30c49654069e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91AA320B6D0D19587BC36AE8C88457428FED9AB91E18031A5D9A30C49654069E"
Last-Modified: Thu, 02 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3428
Expires: Sat, 04 Mar 2023 02:36:57 GMT
Date: Sat, 04 Mar 2023 01:39:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
34.120.237.76200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4726917eabc29a977873ad26e264e70d
4619a0418ee08d6618ead537f31823c98f355b5a
d3c6b43d46ccff30f0003a063b6c4c78d4a782262bfdeb138e6c015555ce2dcb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3381
x-amzn-requestid: 8b89e7ab-b8b3-45cd-af3a-cc419e61f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A-PNPFynoAMFn8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbf8ba-616bedc230d1c2b13a09beae;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 00:26:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 20gfRWuEZKeWijeUdUr10sCx8uqri-zpK-KTXBJrZaQOm3V1Gk8KQw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 0ec9ddba08fcd99386924593dbdbd44a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 11:26:52 GMT
age: 51177
etag: "4619a0418ee08d6618ead537f31823c98f355b5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d042325-4b67-4f58-b8c3-b3a20021340f.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d042325-4b67-4f58-b8c3-b3a20021340f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1abebe29f929587c26fd6013d45feade
a779ed1280ccc423b8ed02a30f76c36517a49b4c
e519a26874b1aa5f42c645825d26188962137723b80f5f82fdc40f6e8f272bde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d042325-4b67-4f58-b8c3-b3a20021340f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8709
x-amzn-requestid: d91e9c6b-ff36-4a02-9067-55f66034547e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BJCT3EuXoAMFb1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64004a7e-5923d51c2a833d9a25893b42;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 07:04:30 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 8te3tPQf82QoEKOlFSGBL0fwwcoQAABQwkEckkvcXNZOjuJ3cgDayA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 07:11:20 GMT
age: 66509
etag: "a779ed1280ccc423b8ed02a30f76c36517a49b4c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48d8d31e-4b2c-47bc-986c-48a254f89921.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48d8d31e-4b2c-47bc-986c-48a254f89921.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94d08004ad57e967c969c2f515226cc4
936c9e53f91cfbd735c8799436c2d1b639aabc39
3a9f38ac2c1bd7129e65671ef7278cd84c0c587c8f1bddff67942c0cd123a85c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48d8d31e-4b2c-47bc-986c-48a254f89921.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14462
x-amzn-requestid: 25020f42-5ab6-41d9-a639-86e97d45c800
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BOUnoH0UoAMFk6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640267ca-320998a5399634120d4bbc4c;Sampled=0
x-amzn-remapped-date: Fri, 03 Mar 2023 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: XOKJzIm30bWJt4A2aDLB09WiR6mjX-s-u2yZTOsZlIM1N9VRHNIkbw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 74ab105148338444981d1b2277ffd9c4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 22:02:00 GMT
age: 13069
etag: "936c9e53f91cfbd735c8799436c2d1b639aabc39"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe438a253-9de3-434d-86fd-3c9c4b9837aa.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe438a253-9de3-434d-86fd-3c9c4b9837aa.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39b91f591a06e5a4643021ff56be3255
3546a22f843406ea91b147776bc37d76251098cd
7c51e000c2ab2925cd800fc90ac15f8f60f8484b10211fc02ae93a8b7c0bc2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe438a253-9de3-434d-86fd-3c9c4b9837aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 4bb2be1d-9522-41ab-982d-3972b289a775
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BJCcnEFyIAMFznw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64004ab6-3f6b26e726a08c9928bffb74;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 07:05:26 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: NAt2bz3CKEB8qOwq6pY6Sb14_9ideYLufPWCnc-IWFEr8Hnqu4MTTg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 a9e73292d0b92053c3e38dcec15fd0e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 07:06:31 GMT
age: 66798
etag: "3546a22f843406ea91b147776bc37d76251098cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F328d356b-d0a6-4f7f-93c6-ff264e8d6153.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F328d356b-d0a6-4f7f-93c6-ff264e8d6153.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b25c92db6b910ae8eea4f456e59bac0d
198a78935bc6349413576ec0e158e79cd196b7f5
45828adb66e27440d52392cb6ba3d9b6f51b4bd9b1863f63f08d68fe195f50ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F328d356b-d0a6-4f7f-93c6-ff264e8d6153.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8213
x-amzn-requestid: 0576f89c-9ddb-47fb-99d7-be8f5d8ebf1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BOUnoEocoAMFl0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640267ca-600b1fa96f28a466797cefc6;Sampled=0
x-amzn-remapped-date: Fri, 03 Mar 2023 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: q2extvP46tKSlL_JXChXI6DcnvHvR35ntbM-rdwqjuZHBLF7Xq9_vg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 22:13:48 GMT
age: 12361
etag: "198a78935bc6349413576ec0e158e79cd196b7f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c614a11-aa51-4b35-a804-e9d6c0ef4769.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c614a11-aa51-4b35-a804-e9d6c0ef4769.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fd7e7448fcf5125b57131079d6c16fa8
6c1cd187631a8adb3524e2e8f510198dfbd5ed65
02e4189cb4d2ebce91f64af64efc8c2498bf36c66c45d5c8ed7e852085c5b38a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c614a11-aa51-4b35-a804-e9d6c0ef4769.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6040
x-amzn-requestid: a45f86b1-38ea-47b9-8177-e5c6317d4245
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BOUozGE2oAMFVAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640267d1-476a2a7d0885886a54fe8287;Sampled=0
x-amzn-remapped-date: Fri, 03 Mar 2023 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: DDzsqqETygFWOaeWvnBJMZBRy8T-_BCMMraRwGU3MJe6FFXvucsigw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 22:13:26 GMT
age: 12383
etag: "6c1cd187631a8adb3524e2e8f510198dfbd5ed65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
139.144.121.216200 OK 106 kB URL HTTP/1.1 www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
IP 139.144.121.216:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (478), with CRLF line terminators
Size 106 kB (106178 bytes)
Hash 036987e745660b54d6b1dd8c348d20e8
087a02945f898a88676c8e721f8c96719dc46a4e
a34bf7e168d18f5da5e0f762a2c4e95529bda62f92e3100df5ded948885e4d3e
GET /auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:47 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js
104.17.24.14200 OK 4.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js
IP 104.17.24.14:0
Hash e40e054c5726f042bad463e3774a2777
5c9413b72837a440b327444104830c35ae3b052c
fcc8a86d2e89e8fbe9815d50c23bf205191ab8a6c0bec67358cd975d94283ff8
GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Mar 2023 01:39:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 11699104
expires: Thu, 22 Feb 2024 01:39:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FkM5TX1JBzJN7BG0bwAO7MccFmkUu9VG7zxr8YbLoENbFBThn477ovq1cN9TnJx3D1EXzqWmwHqQismYvOu2a7LvNfnB6l9pZS9Pl99ekRUT%2BWg87q4489sehIs5whT9i5CHGrk0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7a26685c08210b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.tradesafesportfc.com/js/jquery.player.js
139.144.121.216200 OK 50 kB URL HTTP/1.1 www.tradesafesportfc.com/js/jquery.player.js
IP 139.144.121.216:0
File type ASCII text, with very long lines (50474), with no line terminators
Hash e4b10b6902438873f01ffed7c22bca34
6aabc0c82d7f658a2b2aaac003dfad8929d2c936
d3cf43e8926e14a71047a083c03faf8fceff25d377caea7c76b2be07f907ee8d
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /js/jquery.player.js HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:49 GMT
Server: Apache
Last-Modified: Fri, 24 Sep 2021 12:01:06 GMT
Accept-Ranges: bytes
Content-Length: 50474
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.tradesafesportfc.com/js/jquery.CardValidator.js
139.144.121.216200 OK 6.4 kB URL HTTP/1.1 www.tradesafesportfc.com/js/jquery.CardValidator.js
IP 139.144.121.216:0
Hash fb905575d35b1762182c0bdb0156a8e7
5d7364bb8423174608a55975e985138b09ef16f0
2e31f31633d04598c60731878851d821eaa4403af63b930d58bb10bc9c0428a2
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /js/jquery.CardValidator.js HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:49 GMT
Server: Apache
Last-Modified: Mon, 28 Aug 2017 18:03:08 GMT
Accept-Ranges: bytes
Content-Length: 6367
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.tradesafesportfc.com/css/lostyle.css
139.144.121.216200 OK 119 kB URL HTTP/1.1 www.tradesafesportfc.com/css/lostyle.css
IP 139.144.121.216:0
File type ASCII text, with CRLF line terminators
Size 119 kB (118559 bytes)
Hash 173fd2caf419331c9272c3e2ea6980e9
10ad738e08b5565cd61528dd864dfd35d5d69f4c
40629451d22593898772dcc33427f6f86bf9b839dd030e5e96a93efd2d0d0caa
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /css/lostyle.css HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:48 GMT
Server: Apache
Last-Modified: Wed, 08 Apr 2020 17:00:34 GMT
Accept-Ranges: bytes
Content-Length: 118559
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.tradesafesportfc.com/js/jquery.validate.min.js
139.144.121.216200 OK 34 kB URL HTTP/1.1 www.tradesafesportfc.com/js/jquery.validate.min.js
IP 139.144.121.216:0
File type ASCII text, with very long lines (833), with CRLF line terminators
Hash 9ea64390e300ed1a23e2b62b7cd5cb20
7df056209ee2091fc674aa9f59a1063c072e9e32
b8302f6aead75ca339781930167f4e1ad42f50cf7e17b654c93159037fc9fd20
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /js/jquery.validate.min.js HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:49 GMT
Server: Apache
Last-Modified: Sat, 11 Aug 2018 09:12:40 GMT
Accept-Ranges: bytes
Content-Length: 34439
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.tradesafesportfc.com/css/style.css
139.144.121.216200 OK 619 kB URL HTTP/1.1 www.tradesafesportfc.com/css/style.css
IP 139.144.121.216:0
File type ASCII text, with CRLF line terminators
Size 619 kB (618839 bytes)
Hash cfb7cd54bb257cfb218e05a5a731c29a
3f760b093710e3f987dd4390c26d8956db6d8893
a9b2194a163f7309caa12f626ef199273b8a354649d5d150eff47c53a2baa425
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /css/style.css HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:48 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 17:40:52 GMT
Accept-Ranges: bytes
Content-Length: 618839
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.tradesafesportfc.com/js/jquery.min.js
139.144.121.216200 OK 160 kB URL HTTP/1.1 www.tradesafesportfc.com/js/jquery.min.js
IP 139.144.121.216:0
File type ASCII text, with very long lines (568)
Size 160 kB (159538 bytes)
Hash 50f1aacb05fc40763064d74404c5bcb2
b3c28cab2fc387c630cf23704dde2f1b5013747c
6e1297448cf350be58ab05a6c413fa4d4b97440a0a3ab97fb03c09ff49af5ad4
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /js/jquery.min.js HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:49 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 04:17:40 GMT
Accept-Ranges: bytes
Content-Length: 159538
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
www.tradesafesportfc.com/img/aioe_icon_2_card_lg.png
139.144.121.216200 OK 3.3 kB URL HTTP/1.1 www.tradesafesportfc.com/img/aioe_icon_2_card_lg.png
IP 139.144.121.216:0
File type PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Hash b8ce783abcee5ceb012b84d6f275b908
ef64977d3f752bdefd0df2360600908ef8575324
ec7a2e669f551ad0588a2ce4b1ee04fd5ae9ee16042fc97d022c6b287b9a6494
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /img/aioe_icon_2_card_lg.png HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:50 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:53:10 GMT
Accept-Ranges: bytes
Content-Length: 3262
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.tradesafesportfc.com/img/aioe_icon_3_devices_lg.png
139.144.121.216200 OK 3.7 kB URL HTTP/1.1 www.tradesafesportfc.com/img/aioe_icon_3_devices_lg.png
IP 139.144.121.216:0
File type PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Hash 33ac311a458863ee4fc16b6fae4a40b5
9b65fd7af34bdaaddcde363383114f706b335ad8
e457f20d64d186c61a8467fe70d4eec890ed7fb85d5de2a9fc31834567131a1f
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /img/aioe_icon_3_devices_lg.png HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:50 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:54:26 GMT
Accept-Ranges: bytes
Content-Length: 3677
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.tradesafesportfc.com/img/congra.png
139.144.121.216200 OK 22 kB URL HTTP/1.1 www.tradesafesportfc.com/img/congra.png
IP 139.144.121.216:0
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 1cb46cbb550a7047d40ff30244ca144b
8c41692d4a18624338f9ec32f569b028aa20f827
065a5ede3e090578c581c77883c6acfa9dc9393efc2f19775cfb410263fa8e1c
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /img/congra.png HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:50 GMT
Server: Apache
Last-Modified: Mon, 02 Dec 2019 14:22:14 GMT
Accept-Ranges: bytes
Content-Length: 22060
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.tradesafesportfc.com/fonts/opensans-regular.ttf
139.144.121.216200 OK 45 kB URL HTTP/1.1 www.tradesafesportfc.com/fonts/opensans-regular.ttf
IP 139.144.121.216:0
File type TrueType Font data, 19 tables, 1st "FFTM", 18 names, Microsoft, language 0x409, Digitized data copyright \251 2010-2011, Google Corporation.Open SansRegularAscender - Open Sans\012- data
Hash 5eb12c4256bb7c968f2a807222b09543
b8acd3e311fbe0c9ab3d63bfab9f1a448602bd0d
c03c23a10c648cdb736fe0c1459cd94b7ed7029cb87eefbf32f9de0536c4236d
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /fonts/opensans-regular.ttf HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:51 GMT
Server: Apache
Last-Modified: Wed, 15 Apr 2020 08:35:48 GMT
Accept-Ranges: bytes
Content-Length: 45372
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/ttf
www.tradesafesportfc.com/fonts/dcefont.woff
139.144.121.216200 OK 70 kB URL HTTP/1.1 www.tradesafesportfc.com/fonts/dcefont.woff
IP 139.144.121.216:0
File type Web Open Font Format, TrueType, length 70296, version 0.0\012- data
Hash 2ec43bffa4424b28d0cc96b37cca33a4
1cde2661fb95ece87155c7931d5da6911331ef43
6ea71f4189e78297e3d1834c586a10dd39826ed8361cb1268b847cef45e03cb1
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /fonts/dcefont.woff HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/css/style.css
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:51 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 17:34:38 GMT
Accept-Ranges: bytes
Content-Length: 70296
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: font/woff
www.tradesafesportfc.com/img/logo.svg
139.144.121.216200 OK 1.4 kB URL HTTP/1.1 www.tradesafesportfc.com/img/logo.svg
IP 139.144.121.216:0
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash b55b042f907bc7108f5dca2103a8476b
9fcdcc86bfe1f3c7d4f774775670fbd08fe7556c
d3bf9c143e5e360da41736b1d4e833b5ac6b6f7093ddc91ffc538233a78488d0
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /img/logo.svg HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/css/lostyle.css
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:51 GMT
Server: Apache
Last-Modified: Fri, 03 Apr 2020 16:54:14 GMT
Accept-Ranges: bytes
Content-Length: 1409
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
www.tradesafesportfc.com/img/alert.gif
139.144.121.216200 OK 6.9 kB URL HTTP/1.1 www.tradesafesportfc.com/img/alert.gif
IP 139.144.121.216:0
File type GIF image data, version 89a, 240 x 240\012- data
Hash 6b3fe3fcfdc8a4f64ce935194f5591ab
64d7c83fa447c9b84997b034d8434155ae53163e
86a86f9ba8a23418cb079bbf61fe64974770fb416a27384ef80045976487894e
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /img/alert.gif HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:51 GMT
Server: Apache
Last-Modified: Mon, 06 Apr 2020 21:12:04 GMT
Accept-Ranges: bytes
Content-Length: 6926
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/gif
www.tradesafesportfc.com/img/emdef213.png
139.144.121.216200 OK 26 kB URL HTTP/1.1 www.tradesafesportfc.com/img/emdef213.png
IP 139.144.121.216:0
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash f97e9297a90a73c16b5734c0910785ce
d9df719d58da061ccf75349314e562f8b22b76d3
9f926e83679171e34c289ff3aa5b7f067e75cfa564345f53941ca824c42d5f77
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /img/emdef213.png HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:50 GMT
Server: Apache
Last-Modified: Sat, 04 Apr 2020 20:34:26 GMT
Accept-Ranges: bytes
Content-Length: 26120
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.tradesafesportfc.com/img/aioe_icon_1_pid_lg.png
139.144.121.216200 OK 4.0 kB URL HTTP/1.1 www.tradesafesportfc.com/img/aioe_icon_1_pid_lg.png
IP 139.144.121.216:0
File type PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data
Hash 210d4f89d07fe1f8fd4d9a319e63933f
8b9f60d4c9368881d3cfb41fb7426675e03619db
8e2e5ed99b3cf11d88f281c0ad9ac0aaa30c311515536c8a9c90be58ca56ec39
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /img/aioe_icon_1_pid_lg.png HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:51 GMT
Server: Apache
Last-Modified: Mon, 20 Sep 2021 14:51:00 GMT
Accept-Ranges: bytes
Content-Length: 4004
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.tradesafesportfc.com/img/background.desktop.6.jpeg
139.144.121.216200 OK 329 kB URL HTTP/1.1 www.tradesafesportfc.com/img/background.desktop.6.jpeg
IP 139.144.121.216:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size 329 kB (329324 bytes)
Hash 53e456e88b1d9f21cf1e9c3ae09b16f3
48f020ba58ba11b57f503032cb8887040f7c386b
cf71b824eed5060a14e57f6febf17f44ee2be6fdd20a65b74ab023256b7f979d
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
fortinet Phishing
GET /img/background.desktop.6.jpeg HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:51 GMT
Server: Apache
Last-Modified: Wed, 22 Sep 2021 11:46:02 GMT
Accept-Ranges: bytes
Content-Length: 329324
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
www.tradesafesportfc.com/img/icon.ico
139.144.121.216200 OK 32 kB URL HTTP/1.1 www.tradesafesportfc.com/img/icon.ico
IP 139.144.121.216:0
File type MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 5744986eb3dc6f2da92157a651889902
5a558b58498fab2aeb742acdab51e0c2fbc78385
625816f80596303e9de8e68695973369faa462b416202825b03899c781464fb9
Analyzer Verdict Alert urlquery phishing Phishing - Chase
urlquery phishing Phishing - Chase
GET /img/icon.ico HTTP/1.1
Host: www.tradesafesportfc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.tradesafesportfc.com/auth.php?md=hFytaNUjdoSJwqBGXEpe&hFytaNUjdoSJwqBGXEpe
Cookie: PHPSESSID=a8a01fb69780c0940cb54a98ef72324a
HTTP/1.1 200 OK
Date: Sat, 04 Mar 2023 01:39:51 GMT
Server: Apache
Last-Modified: Fri, 17 Apr 2020 05:43:34 GMT
Accept-Ranges: bytes
Content-Length: 32038
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/x-icon
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F527a15bd-9056-4868-8def-7749d2125b9a.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F527a15bd-9056-4868-8def-7749d2125b9a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2ba102e44a65cbacc0d3359f64c047e
6386856bbe6e588372f59c7043fe601afbec9d4d
969785c071f3cb815c2b9f253f823d2ae750331de5aa60fed3d6818c21365b30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F527a15bd-9056-4868-8def-7749d2125b9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9915
x-amzn-requestid: 3efd81cb-28e6-42ab-9a42-a5da970a4853
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BOUo6FCJoAMFh_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640267d2-2657238f402eed1c41cf2cb5;Sampled=0
x-amzn-remapped-date: Fri, 03 Mar 2023 21:34:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: oJXCynFLjn_3KzssBnVr31zRxaxpiLjfd3N0mOdBqSsECPirFH75xQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 2c6b5dd77f1abe60653ce0454f344b64.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 21:52:57 GMT
age: 13619
etag: "6386856bbe6e588372f59c7043fe601afbec9d4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2