| firefox.settings.services.mozilla.com/v1/ |  143.204.55.36 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb593eb39329cfe060d55be5e4a5405e2 78e46c1028e9f94f8569303ad2d90d7df13a059a 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 10 Sep 2022 21:07:02 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gasy_a1WawstgcLobMNhljQPrQsPFZTZ6IzNIWH3Z78_776DYhJ3gw==
Age: 1667
|
|
| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash76d5eb597558e3dee0d99719d17e71e0 f3a0f3932fa8059f27dc9422d523b938fa9a7d09 d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9410
Expires: Sun, 11 Sep 2022 00:11:40 GMT
Date: Sat, 10 Sep 2022 21:34:50 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain | 143.204.55.35 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain IP143.204.55.35:0
File typePEM certificate\012- , ASCII text Hash742edb4038f38bc533514982f3d2e861 cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 10 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rflVUsBH19HXymjaZX8KaGN6x_ssSIhG9HMHpyWY9wosXudM4dm5pw==
age: 51458
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Sep 2022 21:34:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.36 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sat, 10 Sep 2022 20:56:07 GMT
Expires: Sat, 10 Sep 2022 21:11:38 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Cju5FPzDSkJ6fMQeHSX-O4D_rqiiEVPF267upIiSWguvy2x-j0sQrw==
Age: 2323
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash36fe04277220227ba5ecfe7d2ff1d9d9 2eb9f6560336248cc45c1cd66d87505b5ebdf5d4 94f8f2f8f3b67db18825ea48740ff0ce218d7156fe851d6b023ef43b6bee4f7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3498
Cache-Control: max-age=127814
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 21:34:50 GMT
Etag: "631c4596-1d7"
Expires: Mon, 12 Sep 2022 09:05:04 GMT
Last-Modified: Sat, 10 Sep 2022 08:06:46 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.43.46.140 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.43.46.140:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: INHCIJNF5qUauBwweq37Ug==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: USeKMgslj8NQFmpu2W1+zzfmh8I=
|
|
| otm.mycustomerconnect.com/config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux | 52.34.207.165 | 200 OK | 1.0 MB |
URL HTTP/1.1otm.mycustomerconnect.com/config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux IP52.34.207.165:0
File typeHTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (65375) Size1.0 MB (1013570 bytes) Hashe26dbd78dd7325820260890a39554213 765af635561df3db38081abcd094bf4d839987f3 cfc2211ec6967cffb198a3a642fcee2ba2bd60922ee02f9e6f9bcb51cc740ecb
GET /config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux HTTP/1.1
Host: otm.mycustomerconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 21:34:50 GMT
Server: Apache/2.4.18 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
X-Powered-By: PHP/5.6.20
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js |  104.17.25.14 | 200 OK | 28 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (65447) Hashd900ca08873ee57d40616d39a44cc0aa 7ab3ac8b1504b7b914a6e94c979b8390bb492f6a 1eea479cc0abe04a0846f41031207f9511f12ffef017a6109d4efb6f5523465b
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://otm.mycustomerconnect.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 21:34:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 3890912
expires: Thu, 31 Aug 2023 21:34:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qQQmTurKyU1SA6rx5X%2BhePHjnglCCvDviSazjJtJFJgpwQlFMNqFHRjaoJRhrDcCtqm5xeRaXs4yMlwlklAEbGsiqvIO%2F0ZgRHnF6PQmWIliiZMY4GNz08oBA5p646WR9xS%2FOCEg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748b4a434a0fb511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| status.geotrust.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc5770f464db756867f9dfde179d10e2a d39fc50d7470a3c2e4073e6556bedd0f70c50967 51cf16abcb55396efc50a7d80cb5985d678d5c26f481f0884286f50bff25f91e
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5928
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 21:34:51 GMT
Last-Modified: Sat, 10 Sep 2022 19:56:03 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
|
|
| status.geotrust.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf987975620d5443317485a1c3904e62b 3018afba9e9f97abf855cd7849d08bb9261eec61 63d3159fca556e71410ac8014a23dc0b0d5e23b45ab1bf4a48dd7767c363390d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6482
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 21:34:51 GMT
Last-Modified: Sat, 10 Sep 2022 19:46:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| status.geotrust.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf987975620d5443317485a1c3904e62b 3018afba9e9f97abf855cd7849d08bb9261eec61 63d3159fca556e71410ac8014a23dc0b0d5e23b45ab1bf4a48dd7767c363390d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6482
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 21:34:51 GMT
Last-Modified: Sat, 10 Sep 2022 19:46:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| status.geotrust.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf987975620d5443317485a1c3904e62b 3018afba9e9f97abf855cd7849d08bb9261eec61 63d3159fca556e71410ac8014a23dc0b0d5e23b45ab1bf4a48dd7767c363390d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6482
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 21:34:51 GMT
Last-Modified: Sat, 10 Sep 2022 19:46:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| otm.mycustomerconnect.com/config/mail.ionos.com/robots.txt | 52.34.207.165 | 404 Not Found | 349 B |
URL HTTP/1.1otm.mycustomerconnect.com/config/mail.ionos.com/robots.txt IP52.34.207.165:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash9360d8e4d515ffcae6f1ad8c487dac8b efbc2037fb24a9075ebf5446933c0c7a6a4db6b5 7c57e79f7046b0948ac9496241b41e3767fd782f6f5ccb84ee69a53d1d45be91
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /config/mail.ionos.com/robots.txt HTTP/1.1
Host: otm.mycustomerconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Sat, 10 Sep 2022 21:34:51 GMT
Server: Apache/2.4.18 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 349
Connection: close
Content-Type: text/html; charset=iso-8859-1
|
|
| ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=13 |  213.165.66.58 | 200 OK | 51 kB |
URL HTTP/2ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=13 IP213.165.66.58:0
File typeWeb Open Font Format, TrueType, length 50688, version 1.0\012- data Hashf405f04cc9fd00b2b8f12d3657cd1b9d a9eedef1924db8622319c87d4c436d47bba67398 35538b399f40d6db114f64b970fb8a612d88d833906f95f4cb8675c0277ecfb3
GET /exos/icons/exos-icon-font.woff?v=13 HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://otm.mycustomerconnect.com
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 21:34:51 GMT
content-type: application/font-woff
content-length: 50688
set-cookie: DPX=v1:lJ26u64VG+:jYSStFXc:631d1110:gb; Path=/; Expires=Sat, 10-Sep-22 22:34:51 GMT; HttpOnly; Secure
server: Apache
last-modified: Fri, 05 Aug 2022 04:39:12 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:57 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ce1.uicdn.net/exos/fonts/open-sans/opensans-regular.woff | 213.165.66.58 | 200 OK | 64 kB |
URL HTTP/2ce1.uicdn.net/exos/fonts/open-sans/opensans-regular.woff IP213.165.66.58:0
File typeWeb Open Font Format, TrueType, length 63712, version 1.0\012- data Hashac327c4db6284ef64ebe872b6308f5da 7dd17593d3947f4ea10be937634ef8f553443e5a 2e1587380141daff4e10a8e3db8f7ae5887102ab7576bff43049590f637ac20b
GET /exos/fonts/open-sans/opensans-regular.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://otm.mycustomerconnect.com
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 21:34:51 GMT
content-type: application/font-woff
content-length: 63712
set-cookie: DPX=v1:smluusuWAE:ILbkR9rT:631d1110:gb; Path=/; Expires=Sat, 10-Sep-22 22:34:51 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:07 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:56 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ce1.uicdn.net/exos/fonts/overpass/overpass-bold.woff | 213.165.66.58 | 200 OK | 42 kB |
URL HTTP/2ce1.uicdn.net/exos/fonts/overpass/overpass-bold.woff IP213.165.66.58:0
File typeWeb Open Font Format, TrueType, length 42092, version 0.0\012- data Hash998074293ec8cdc0e43e3d3add3b523e c6b7b07672e36062a9d647295d85644b170ba5b2 7afccd9150b0fcbf1a1056e6cc6051c9b6d85a55da7bf1a7fb0f475c0b22facc
GET /exos/fonts/overpass/overpass-bold.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://otm.mycustomerconnect.com
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 21:34:51 GMT
content-type: application/font-woff
content-length: 42092
set-cookie: DPX=v1:gqi8ZdXsc6:B93qSlZi:631d1110:gb; Path=/; Expires=Sat, 10-Sep-22 22:34:51 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:06 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:57 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ce1.uicdn.net/exos/fonts/overpass/overpass-regular.woff | 213.165.66.58 | 200 OK | 43 kB |
URL HTTP/2ce1.uicdn.net/exos/fonts/overpass/overpass-regular.woff IP213.165.66.58:0
File typeWeb Open Font Format, TrueType, length 42580, version 0.0\012- data Hashff37bc2bf376202dde890cc12b0fd0f9 f30c16ece8af43a25a46d7bd4e3ec95199fa6a55 d78e7ad4838a9fb4db11451b1db78ccd0b0c7b28f5787684ce2870918ce27bb5
GET /exos/fonts/overpass/overpass-regular.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://otm.mycustomerconnect.com
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 21:34:51 GMT
content-type: application/font-woff
content-length: 42580
set-cookie: DPX=v1:pBsdEw4uOh:QtTg3OjU:631d1110:gb; Path=/; Expires=Sat, 10-Sep-22 22:34:51 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:06 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:57 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ias.uicdn.net/fileadmin/IONOS/user_upload/email-marketing.svg?h=0fbfd484b7052efe457d3090b4c14a657e1f366d | 217.160.86.27 | 200 OK | 3.0 kB |
URL HTTP/2ias.uicdn.net/fileadmin/IONOS/user_upload/email-marketing.svg?h=0fbfd484b7052efe457d3090b4c14a657e1f366d IP217.160.86.27:0
File typeSVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text Hash4fda4bae2411451b53496c748d7ede3f a1219698cb73ab1e7db261f9c32a913199676342 78f9e806217f3b98fc6672e98f37b826f6335b8a835c1017dafeb4423fac50cd
GET /fileadmin/IONOS/user_upload/email-marketing.svg?h=0fbfd484b7052efe457d3090b4c14a657e1f366d HTTP/1.1
Host: ias.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 21:34:51 GMT
content-type: image/svg+xml
content-length: 3036
set-cookie: DPX=v1:G2ZHDcMQu3:rcROgGem:631d1110:gb; Path=/; Expires=Sat, 10-Sep-22 22:34:51 GMT; HttpOnly; Secure
server: Apache
strict-transport-security: max-age=31536000
last-modified: Sun, 08 Sep 2019 15:29:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ce1.uicdn.net/exos/fonts/open-sans/opensans-bold.woff | 213.165.66.58 | 200 OK | 64 kB |
URL HTTP/2ce1.uicdn.net/exos/fonts/open-sans/opensans-bold.woff IP213.165.66.58:0
File typeWeb Open Font Format, TrueType, length 63564, version 1.0\012- data Hash892667349c5cff6fcf7e40439596b97c 7956fd048338c3c6253aa58f65442441866d4b4e 7d7a1a8ec55f31a6674fd2e2c41bcc6421a9aeb5cf161c6e93363f31347160f9
GET /exos/fonts/open-sans/opensans-bold.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://otm.mycustomerconnect.com
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 21:34:51 GMT
content-type: application/font-woff
content-length: 63564
set-cookie: DPX=v1:6//bEmtQN5:1sL2C9ZE:631d1110:gb; Path=/; Expires=Sat, 10-Sep-22 22:34:51 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:07 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:57 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| status.geotrust.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc72bb092e68499bdc2e5a77cbba10a30 981a12f9f0dfd80adc895818f1ca7c6ec5f6c67e 881a038e342d3c46722d806e42cb00aaac5665cceeb3283e6a041ff2bf9abb1d
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4675
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 21:34:51 GMT
Last-Modified: Sat, 10 Sep 2022 20:16:56 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| ahab.ionos.com/1.0/app/getImgURL | 217.160.86.48 | 200 200 | 14 B |
URL HTTP/1.1ahab.ionos.com/1.0/app/getImgURL IP217.160.86.48:0
File typeASCII text, with no line terminators Hash33b36b18b482050308aebdd327d8ef75 a18aa8f5dc5b8c6391a7d00e8d78d389e388cebf aad42f19d6df86355143db4aaedf13aa9cfa600881ed14a4f8394b95078a0e25
POST /1.0/app/getImgURL HTTP/1.1
Host: ahab.ionos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 478
Origin: http://otm.mycustomerconnect.com
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 200
Date: Sat, 10 Sep 2022 21:34:51 GMT
Server: Apache
Vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
Access-Control-Allow-Origin: *
Content-Length: 14
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/octet-stream
|
|
| otm.mycustomerconnect.com/config/mail.ionos.com/maintenance/status.json | 52.34.207.165 | 404 Not Found | 362 B |
URL HTTP/1.1otm.mycustomerconnect.com/config/mail.ionos.com/maintenance/status.json IP52.34.207.165:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash2fed3fb6828b8afc78b79045bed65bbf 05832d13ad2f6d1a17344e1993296b4049582145 babb991eec883b8a69c39ade46d7e01ec70293ad733d0627b2e3d56d6c706bc8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /config/mail.ionos.com/maintenance/status.json HTTP/1.1
Host: otm.mycustomerconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux
HTTP/1.1 404 Not Found
Date: Sat, 10 Sep 2022 21:34:51 GMT
Server: Apache/2.4.18 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 362
Connection: close
Content-Type: text/html; charset=iso-8859-1
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash477fd76de0b69553430d504fe527cc06 88fe80a099e610212f27427ae6fd5b4e03b3df16 f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9022
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 21:34:52 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash477fd76de0b69553430d504fe527cc06 88fe80a099e610212f27427ae6fd5b4e03b3df16 f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9022
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 21:34:52 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash477fd76de0b69553430d504fe527cc06 88fe80a099e610212f27427ae6fd5b4e03b3df16 f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9022
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 21:34:52 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg | 34.120.237.76 | 200 OK | 9.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7ade70e6dbcfb3ca1765f95112671e69 3768753be084c0e0fc268be5b192d02d769114b6 9670a3bf2476ba193cfeb3153c1254bdcfc980a28503dda0d9b398a3a59f53f4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: 720a4111-91de-4672-88c8-f40db517c07d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YHsjRE13oAMFbCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63195ae1-288f1f5456bf4d146dcf774c;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 03:00:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HwwG0Hjf8uZn1AtbLU_wKs3w9lict3tRP31XQY6tIxDz9KDNaBMAqw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 04:00:05 GMT
age: 63287
etag: "3768753be084c0e0fc268be5b192d02d769114b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp | 34.120.237.76 | 200 OK | 4.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash71bafbee3867c04c3712ff98a123d52c ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf 58ff1700e0b125caefb73719e2b3d734b2fbcc5ed1aabe5a11bb73b43edab831
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4477
x-amzn-requestid: bbdca46e-5628-4faf-a0fe-ea1b5b39ac2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNjzaHrIoAMF-iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb348-567e946e7cf77f2e11c17c97;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: a0AyKhmYA7WPwciU2nTXwyChZV_riw1QsqI_giBIcdZhi3Nz4jM0Sw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:59:11 GMT
age: 84941
etag: "ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd21a3e07583d9fad4104b6457f7915e7 fdc9453562f993e2545ca99731a7741e748b6082 8ea38264c82c6b544447079cc92eae70d0968a070ba39022af0e18c498916338
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8266
x-amzn-requestid: 3411ec4b-ac18-4b4e-8876-c99b94d3a4a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNitWEjhIAMFWpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb188-4d9e496e7ff141b46748d850;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: vyV1_onImxuLNGp4UI1W5grcuVW3LHJFJjvmO0VXU-OYorF6RVcoDw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:50:11 GMT
age: 85481
etag: "fdc9453562f993e2545ca99731a7741e748b6082"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash1abac18a85802f38f08561ac64020b55 afbc7666fa0b2093ef0c5d9a955d54d139c09b30 eae7f28dd178293939ecd81082ab68ae6098bb3cb1f1fe9411c38314ddb0f944
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9610
x-amzn-requestid: 34102145-abda-4987-a68d-9069496366ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNj0oF7loAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb350-52aee64214c814812c03262e;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 91AsC8-zVFCOPHFb2qnlTev2aXzdCEDYtc68JtYYsQSKS7OFF4QzgQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:59:50 GMT
age: 84902
etag: "afbc7666fa0b2093ef0c5d9a955d54d139c09b30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg | 34.120.237.76 | 200 OK | 7.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3f8aeb20a6543be83f3e422796c4dc70 4e4e127039dd8099c63c3bde198118d2874f7342 0f9fdd1b577e4719f88620bb451131bfb120790479b4feccb4222647fb3ea453
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7218
x-amzn-requestid: 4e9672b6-5415-4808-9508-22e8c42de448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE_QzHffIAMFYTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318459e-743b975a2770e2a90c616d87;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:17:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dR6KtfbMJzFz0j8zIFUNtdkJHUaerjxWbUyYKBD-jR_uAAvCCty01Q==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:01:33 GMT
age: 84799
etag: "4e4e127039dd8099c63c3bde198118d2874f7342"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe8f11aeba65478b039cfb4100aa23435 88db17a82ea0207ccb4826c2961875c5106b427a 6f6ec5922ec54d824e7f933de87608c5a763da119ae9461d99c6525649b1a9af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8676
x-amzn-requestid: 64a58aa8-8321-4c91-98fe-dbf97996c513
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNiuZEjnIAMFRFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb18f-77b635593b202d7d3cd0ac84;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: VWwNSpFvcDq3nrn91QvYjrJX5hLjp96vrKgZzR-pOdrdHx7MlcagGQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:13:43 GMT
age: 84069
etag: "88db17a82ea0207ccb4826c2961875c5106b427a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| otm.mycustomerconnect.com/config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux | 52.34.207.165 | 200 OK | 1.0 MB |
URL HTTP/1.1otm.mycustomerconnect.com/config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux IP52.34.207.165:0
File typeHTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (65375) Size1.0 MB (1013570 bytes) Hashe26dbd78dd7325820260890a39554213 765af635561df3db38081abcd094bf4d839987f3 cfc2211ec6967cffb198a3a642fcee2ba2bd60922ee02f9e6f9bcb51cc740ecb
GET /config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux HTTP/1.1
Host: otm.mycustomerconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://otm.mycustomerconnect.com/config/mail.ionos.com/login.php?e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&pid=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&frameworke9b1e4b03e251b53cad8b92ba641b3c2=e9b1e4b03e251b53cad8b92ba641b3c2e9b1e4b03e251b53cad8b92ba641b3c2&username=abuse.ionos.com&ubuntu=e9b1e4b03e251b53cad8b92ba641b3c2&unix=e9b1e4b03e251b53cad8b92ba641b3c2-linux
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 21:34:51 GMT
Server: Apache/2.4.18 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
X-Powered-By: PHP/5.6.20
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|