urlquery - report: www.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
firefox.settings.services.mozilla.com (2)	867	2020-05-27 20:08:30 UTC	2022-09-16 18:35:00 UTC	143.204.55.115
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-09-16 04:25:30 UTC	143.204.55.49
www.hillsidearms.com (1)	0	2021-05-26 05:02:45 UTC	2022-09-16 19:26:36 UTC	103.224.212.221	Unknown ranking
ww25.hillsidearms.com (7)	0	2022-09-05 15:29:04 UTC	2022-09-16 19:26:42 UTC	199.59.243.222	Unknown ranking
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2022-09-16 17:35:14 UTC	93.184.220.29
ocsp.pki.goog (6)	175	2017-06-14 07:23:31 UTC	2022-09-16 04:23:37 UTC	142.250.74.3
afs.googlesyndication.com (2)	0	2013-09-05 10:37:02 UTC	2022-09-17 01:55:59 UTC	142.250.74.162	Domain (googlesyndication.com) ranked at: 1586
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-09-16 15:59:39 UTC	34.120.237.76
r3.o.lencr.org (6)	344	2020-12-02 08:52:13 UTC	2022-09-16 04:41:23 UTC	23.36.76.226
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-09-16 04:23:36 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-09-16 05:11:10 UTC	44.237.239.70

Scan Date	Severity	Indicator	Comment
2022-09-17	2	www.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca (...)	Phishing
2022-09-17	2	ww25.hillsidearms.com/js/parking.2.96.4.js	Phishing
2022-09-17	2	ww25.hillsidearms.com/_tr	Phishing

Date	UQ / IDS / BL	URL	IP
2023-03-25 13:39:01 +0000	0 - 0 - 11	aasdasd.com/	103.224.212.221
2023-03-25 06:41:23 +0000	0 - 4 - 2	noko.biz/	103.224.212.221
2023-03-24 11:06:21 +0000	0 - 0 - 1	vuachanle.club/login.php?success_redirect_url	103.224.212.221
2023-03-24 08:32:32 +0000	0 - 0 - 3	s-ssl.us/	103.224.212.221
2023-03-23 16:24:59 +0000	0 - 4 - 0	wsstore.cc/	103.224.212.221

Date	UQ / IDS / BL	URL	IP
2023-03-31 21:48:54 +0000	0 - 0 - 2	whaleannounce.xyz/	103.224.182.210
2023-03-31 21:48:29 +0000	0 - 0 - 5	txpvriy.cn/	103.224.182.210
2023-03-31 21:33:17 +0000	0 - 0 - 5	ubv6p8p.cn/	103.224.182.210
2023-03-31 21:29:54 +0000	0 - 0 - 5	smphl.cyou/	103.224.182.210
2023-03-31 21:29:51 +0000	0 - 0 - 5	smphl.cyou/	103.224.182.210

Date	UQ / IDS / BL	URL	IP
2023-03-21 14:02:09 +0000	0 - 0 - 2	www.hillsidearms.com/dhl/view/mydhl/x9do9ijns (...)	108.59.12.101
2023-03-21 14:01:21 +0000	0 - 0 - 2	www.hillsidearms.com/dhl/view/mydhl/4gusmdfqj (...)	108.59.12.101
2023-03-21 11:03:51 +0000	0 - 0 - 5	www.hillsidearms.com/dhl/view/mydhl/vnp155zbk (...)	5.79.79.210
2023-03-21 10:48:30 +0000	0 - 0 - 4	ww25.hillsidearms.com/dhl/view/mydhl/7zuk7qo7 (...)	81.171.22.5
2023-03-21 10:34:27 +0000	0 - 0 - 1	hillsidearms.com/dhl/view/mydhl/a1ng87b50yi2e (...)	199.115.115.102

Date	UQ / IDS / BL	URL	IP
2022-09-17 06:29:23 +0000	0 - 0 - 3	www.hillsidearms.com/DHL/view/mydhl/a1ng87b50 (...)	103.224.212.221
2022-09-17 05:26:25 +0000	0 - 0 - 2	ww25.hillsidearms.com/DHL/view/mydhl/dcehl182 (...)	199.59.243.222
2022-09-17 04:29:43 +0000	0 - 0 - 3	www.hillsidearms.com/DHL/view/mydhl/g3ol84xvm (...)	103.224.212.221
2022-09-17 01:12:02 +0000	0 - 0 - 2	ww25.hillsidearms.com/DHL/view/mydhl/mz8hpuvr (...)	199.59.243.222
2022-09-17 00:50:46 +0000	0 - 0 - 2	ww25.hillsidearms.com/DHL/view/mydhl/fyubf8g4 (...)	199.59.243.222

Request	Response
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Sat, 17 Sep 2022 04:11:12 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: PFjq6KdRPsznUFZ6xIrJUGw20A9CIge41r5AW1kxW1JE-oGlifUEug== Age: 828 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 91dd975a7b17b2922dd23c0e49314e40 Sha1: 57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2 Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: fef9ce9f75ec19e7ae2ccbffb6654db2473a2b4acc94c1b4303e5ec24149465f 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "FEF9CE9F75EC19E7AE2CCBFFB6654DB2473A2B4ACC94C1B4303E5EC24149465F" Last-Modified: Thu, 15 Sep 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4611 Expires: Sat, 17 Sep 2022 05:41:51 GMT Date: Sat, 17 Sep 2022 04:25:00 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 96daaf84cd2c07756756caf7a2724a29 Sha1: d24d47c68eec98d44bf341dab9d893df97103e1a Sha256: fef9ce9f75ec19e7ae2ccbffb6654db2473a2b4acc94c1b4303e5ec24149465f
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 143.204.55.49 HASH: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345 143.204.55.49 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Sat, 20 Aug 2022 23:18:05 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Fri, 16 Sep 2022 04:35:16 GMT etag: "742edb4038f38bc533514982f3d2e861" x-cache: Hit from cloudfront via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-C1 x-amz-cf-id: 2HseKSWduRxdy8B7YECTjtR1D0zHTnGmY8kLeRSq6qbnabqNR0P6rw== age: 85786 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 742edb4038f38bc533514982f3d2e861 Sha1: cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id HTTP/1.1 Host: www.hillsidearms.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Cookie: __tad=1663356402.3043733 Upgrade-Insecure-Requests: 1	URL: www.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb (...) FQDN: www.hillsidearms.com IP: 103.224.212.221 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 103.224.212.221 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Sat, 17 Sep 2022 04:25:00 GMT Server: Apache/2.4.38 (Debian) Location: http://ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b Content-Length: 0 Connection: close --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Phishing
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sat, 17 Sep 2022 04:25:01 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b HTTP/1.1 Host: ww25.hillsidearms.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Cookie: __gsas=ID=f4d9a286fa078b90:T=1663356403:S=ALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw Upgrade-Insecure-Requests: 1	URL: ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpcc (...) FQDN: ww25.hillsidearms.com IP: 199.59.243.222 HASH: 7fee1fc07833371ead13f369f8dd2a306e8e3a1de3d4690edd95be9a19d982fd 199.59.243.222 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: openresty Date: Sat, 17 Sep 2022 04:25:01 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d; expires=Sat, 17-Sep-2022 04:40:01 GMT; Max-Age=900; path=/; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_nbxameah2W8JDPcyeKacbPuI5Vwht/sUDJDXpd50PY6coPSNrCU8V6YGWEL46eoS9vietKH7fZL6JE1WMg1PZg== Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1707), with no line terminators Size: 1225 Md5: a2b1cd01c0d5e0c799daa557d9795781 Sha1: d570af5e76242c34bb1f300938d94d41ae9988d2 Sha256: 7fee1fc07833371ead13f369f8dd2a306e8e3a1de3d4690edd95be9a19d982fd
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Date: Sat, 17 Sep 2022 04:03:22 GMT Cache-Control: max-age=3600 Expires: Sat, 17 Sep 2022 04:33:30 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: 9a5eLL4Gj_uYzROznQsKgFCOYneaGIL9vg3JWNQuighVLONR0zwgug== Age: 1299 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /js/parking.2.96.4.js HTTP/1.1 Host: ww25.hillsidearms.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b Cookie: __gsas=ID=f4d9a286fa078b90:T=1663356403:S=ALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw; parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d	URL: ww25.hillsidearms.com/js/parking.2.96.4.js FQDN: ww25.hillsidearms.com IP: 199.59.243.222 HASH: d1497a254027db4680133ed2d0918d30198c6001397524a7261fa3b480002030 199.59.243.222 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Server: openresty Date: Sat, 17 Sep 2022 04:25:01 GMT Last-Modified: Fri, 16 Sep 2022 13:55:53 GMT Transfer-Encoding: chunked Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: HTML document, ASCII text, with very long lines (65536), with no line terminators Size: 22240 Md5: 9c17df1bb8ddcdee8cc2579c669a4296 Sha1: fc4503d2191a1229bc6306974f1a208fd036571a Sha256: d1497a254027db4680133ed2d0918d30198c6001397524a7261fa3b480002030 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 914b15f28636e0a5e851540ffb0625ecd09d0546b2f1f7af90b267ceebcf1d5d 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4511 Cache-Control: 'max-age=158059' Date: Sat, 17 Sep 2022 04:25:01 GMT Last-Modified: Sat, 17 Sep 2022 03:09:50 GMT Server: ECS (ska/F704) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 3db421016cf0e3ad25f324cf0faf0fac Sha1: b15909de1105d4d2fb5be5b3920c454daf022445 Sha256: 914b15f28636e0a5e851540ffb0625ecd09d0546b2f1f7af90b267ceebcf1d5d
POST /_fd?id&subid1=20220917-1425-00f3-aafb-49e618bb986b HTTP/1.1 Host: ww25.hillsidearms.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b Content-Type: application/json Origin: http://ww25.hillsidearms.com Connection: keep-alive Cookie: __gsas=ID=f4d9a286fa078b90:T=1663356403:S=ALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw; parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d Content-Length: 0	URL: ww25.hillsidearms.com/_fd?id&subid1=20220917-1425-00f3- (...) FQDN: ww25.hillsidearms.com IP: 199.59.243.222 HASH: 0436ab4bc4dc646038dede21a13b73c2519f40cdc26d1ca61dc21b75b5345ac0 199.59.243.222 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: openresty Transfer-Encoding: chunked Connection: keep-alive Date: Sat, 17 Sep 2022 04:25:01 GMT X-Version: 2.96.4 Set-Cookie: parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d; expires=Sat, 17-Sep-2022 04:40:01 GMT; Max-Age=900; path=/; httponly Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with very long lines (5421), with no line terminators Size: 2715 Md5: 796cac615411902e1463cbad8c9e5e2d Sha1: 76c72bbd0e0f8333d4bf7aac17c9a08af10e8272 Sha256: 0436ab4bc4dc646038dede21a13b73c2519f40cdc26d1ca61dc21b75b5345ac0
GET /px.gif?ch=2&rn=7.89448953482042 HTTP/1.1 Host: ww25.hillsidearms.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b Cookie: __gsas=ID=f4d9a286fa078b90:T=1663356403:S=ALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw; parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d	URL: ww25.hillsidearms.com/px.gif?ch=2&rn=7.89448953482042 FQDN: ww25.hillsidearms.com IP: 199.59.243.222 HASH: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 199.59.243.222 HTTP/1.1 200 OK Content-Type: image/gif Server: openresty Date: Sat, 17 Sep 2022 04:25:01 GMT Content-Length: 42 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /px.gif?ch=1&rn=7.89448953482042 HTTP/1.1 Host: ww25.hillsidearms.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b Cookie: __gsas=ID=f4d9a286fa078b90:T=1663356403:S=ALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw; parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d	URL: ww25.hillsidearms.com/px.gif?ch=1&rn=7.89448953482042 FQDN: ww25.hillsidearms.com IP: 199.59.243.222 HASH: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629 199.59.243.222 HTTP/1.1 200 OK Content-Type: image/gif Server: openresty Date: Sat, 17 Sep 2022 04:25:01 GMT Content-Length: 42 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 15d7d8acbcd94d9ca8579cc31a9ec621e76408663bc4b047e5e127acb14334a6 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 17 Sep 2022 04:25:01 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 9730b7d7d5f0481f65712991a899f4b8 Sha1: facb4df5e4a4ac98b9bdd126c7dbb531cf0fe1e7 Sha256: 15d7d8acbcd94d9ca8579cc31a9ec621e76408663bc4b047e5e127acb14334a6
GET /favicon.ico HTTP/1.1 Host: ww25.hillsidearms.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b Cookie: __gsas=ID=f4d9a286fa078b90:T=1663356403:S=ALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw; parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d	URL: ww25.hillsidearms.com/favicon.ico FQDN: ww25.hillsidearms.com IP: 199.59.243.222 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 199.59.243.222 HTTP/1.1 200 OK Content-Type: image/x-icon Server: openresty Date: Sat, 17 Sep 2022 04:25:01 GMT Content-Length: 0 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive ETag: "61424bb6-0" x-backend-server: ip-10-201-16-225.ec2.internal Accept-Ranges: bytes --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: eFxLnSGl5mIwbEiHblgALQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 44.237.239.70 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 44.237.239.70 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: lWRX4KyUoH8fDJ7NpZ4OG4nErVI= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 76bc6fffeb8593064820e909edc5e4991cb4a5c1b609916a6021974665b5286f 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 17 Sep 2022 04:25:01 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: fa86a62c870c1ce23fd85f73e99d7964 Sha1: 81af6fd2507bb58c6b040fd5f494de01d22e7102 Sha256: 76bc6fffeb8593064820e909edc5e4991cb4a5c1b609916a6021974665b5286f
GET /afs/ads?adtest=off&psid=7049491253&pcsa=false&channel=pid-bodis-gcontrol56%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol417&client=dp-bodis30_3ph&r=m&sct=ID%3Df4d9a286fa078b90%3AT%3D1663356403%3AS%3DALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw&sc_status=6&hl=en&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17300953%2C17300956%2C17301020%2C17301022%2C17301094%2C17301097&format=r3&nocache=4481663388685015&num=0&output=afd_ads&domain_name=ww25.hillsidearms.com&v=3&bsl=8&pac=2&u_his=1&u_tz=0&dt=1663388685017&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1264&psh=79&frm=0&uio=-&cont=rs&jsid=caf&jsv=473734947&rurl=http%3A%2F%2Fww25.hillsidearms.com%2FDHL%2Fview%2Fmydhl%2Fq42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php%3Fid%26subid1%3D20220917-1425-00f3-aafb-49e618bb986b&adbw=master-1%3A1264 HTTP/1.1 Host: afs.googlesyndication.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://ww25.hillsidearms.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: afs.googlesyndication.com/afs/ads?adtest=off&psid=70494 (...) FQDN: afs.googlesyndication.com IP: 142.250.74.162 HASH: 77ae420e7f40fffae33874c4bcca4138146f0255ab65f5fd404fde0e0358672c 142.250.74.162 HTTP/2 200 OK content-type: text/html; charset=UTF-8 content-disposition: inline date: Sat, 17 Sep 2022 04:25:01 GMT expires: Sat, 17 Sep 2022 04:25:01 GMT cache-control: private, max-age=3600 content-encoding: br server: gws content-length: 2133 x-xss-protection: 0 set-cookie: CONSENT=PENDING+653; expires=Mon, 16-Sep-2024 04:25:01 GMT; path=/; domain=.googlesyndication.com; Secure p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5666) Size: 2133 Md5: 7dbb5aeea4ee2dcecb8471110e66d96a Sha1: 795d98039189838ad5991a95f83221778701980c Sha256: 77ae420e7f40fffae33874c4bcca4138146f0255ab65f5fd404fde0e0358672c
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 76bc6fffeb8593064820e909edc5e4991cb4a5c1b609916a6021974665b5286f 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 17 Sep 2022 04:25:02 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: fa86a62c870c1ce23fd85f73e99d7964 Sha1: 81af6fd2507bb58c6b040fd5f494de01d22e7102 Sha256: 76bc6fffeb8593064820e909edc5e4991cb4a5c1b609916a6021974665b5286f
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 17 Sep 2022 04:25:02 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 4cc0aaf293fed6c16e1dde02c50c8f40 Sha1: e94f11cd8fa955f28856a02aa7115aa5f3626d98 Sha256: b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: d7a41bc16c6193d184e995f54247002cfe75a74ff174810f18a4dc5384df3578 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 17 Sep 2022 04:25:02 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 1ed5276ce78dd7ec3e5d5612db66d478 Sha1: b76defb0ef2cb1a47f7b7064b7ed7008eb219cbb Sha256: d7a41bc16c6193d184e995f54247002cfe75a74ff174810f18a4dc5384df3578
GET /adsense/domains/caf.js HTTP/1.1 Host: afs.googlesyndication.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://afs.googlesyndication.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: afs.googlesyndication.com/adsense/domains/caf.js FQDN: afs.googlesyndication.com IP: 142.250.74.162 HASH: 0d9dbb684689d138250674a1b73dc041e0a75fa15d1488fc4a8ecbfdafbc1cef 142.250.74.162 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 accept-ranges: bytes vary: Accept-Encoding content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="ads-afs-ui" report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} date: Sat, 17 Sep 2022 04:25:02 GMT expires: Sat, 17 Sep 2022 04:25:02 GMT cache-control: private, max-age=3600 etag: "5892873749078231012" x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1885) Size: 54136 Md5: 5850898c14a6b8f83dd0d9abf03fa941 Sha1: 0e7a4e3dbb2ad97c0edfeefc682076c33da409d0 Sha256: 0d9dbb684689d138250674a1b73dc041e0a75fa15d1488fc4a8ecbfdafbc1cef
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 17 Sep 2022 04:25:02 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 8fb510c0e0fbff6302a68eb385520e3f Sha1: cd5149c6ffc7ee3d90e9e6884af8e02f44c7ab00 Sha256: 2b9cd0f540eb0916ad5c3ee63dbc8ee57570c3eaae7aeabca5c8cb03a3c73c32
POST /_tr HTTP/1.1 Host: ww25.hillsidearms.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b Content-Type: application/json Origin: http://ww25.hillsidearms.com Content-Length: 2353 Connection: keep-alive Cookie: __gsas=ID=f4d9a286fa078b90:T=1663356403:S=ALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw; parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d	URL: ww25.hillsidearms.com/_tr FQDN: ww25.hillsidearms.com IP: 199.59.243.222 HASH: 47fd05ef74fef5da03fa22483e63fc977cad8e026ae41dadbbcc3745907f306b 199.59.243.222 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: openresty Transfer-Encoding: chunked Connection: keep-alive Date: Sat, 17 Sep 2022 04:25:02 GMT X-Version: 2.96.4 Set-Cookie: parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d; expires=Sat, 17-Sep-2022 04:40:02 GMT; Max-Age=900; path=/; httponly Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with no line terminators Size: 22 Md5: 5cfde9b47de2d84bd26fc473632647c0 Sha1: fd53c70631b6068328be57daec71bd94bf004d41 Sha256: 47fd05ef74fef5da03fa22483e63fc977cad8e026ae41dadbbcc3745907f306b Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02" Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9838 Expires: Sat, 17 Sep 2022 07:09:01 GMT Date: Sat, 17 Sep 2022 04:25:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4abe181b1d086cd7e122d7de32f63fb6 Sha1: e3482d4df0d59c247109ff7fb97f20ec6f142c4d Sha256: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02" Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9838 Expires: Sat, 17 Sep 2022 07:09:01 GMT Date: Sat, 17 Sep 2022 04:25:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4abe181b1d086cd7e122d7de32f63fb6 Sha1: e3482d4df0d59c247109ff7fb97f20ec6f142c4d Sha256: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02" Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9838 Expires: Sat, 17 Sep 2022 07:09:01 GMT Date: Sat, 17 Sep 2022 04:25:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4abe181b1d086cd7e122d7de32f63fb6 Sha1: e3482d4df0d59c247109ff7fb97f20ec6f142c4d Sha256: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02" Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9838 Expires: Sat, 17 Sep 2022 07:09:01 GMT Date: Sat, 17 Sep 2022 04:25:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4abe181b1d086cd7e122d7de32f63fb6 Sha1: e3482d4df0d59c247109ff7fb97f20ec6f142c4d Sha256: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02" Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9838 Expires: Sat, 17 Sep 2022 07:09:01 GMT Date: Sat, 17 Sep 2022 04:25:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4abe181b1d086cd7e122d7de32f63fb6 Sha1: e3482d4df0d59c247109ff7fb97f20ec6f142c4d Sha256: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: d5787a6a12d275555c627e3245b37d4e751148345a09d5671b343cfebe7173b4 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8500 x-amzn-requestid: e1ca6cef-c033-4887-80cf-2014ab8e620c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Ykn5cEnLIAMFrzA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6324ed09-3afc16cf66fef0e62dd6f3cc;Sampled=0 x-amzn-remapped-date: Fri, 16 Sep 2022 21:39:21 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: pPCI5VDX3PIldEnkLv-VNCFWuykiarYQdLYguNTfmbwxYCDVaS2EcA== via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google date: Fri, 16 Sep 2022 22:01:45 GMT age: 22998 etag: "28ac45ef155c66dd79a306f14d3b38f597b6a32e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8500 Md5: d46a910081eb782408f1a2fa3c6aabba Sha1: 28ac45ef155c66dd79a306f14d3b38f597b6a32e Sha256: d5787a6a12d275555c627e3245b37d4e751148345a09d5671b343cfebe7173b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7788 x-amzn-requestid: 2cb48f87-8b72-4ff7-b041-a6e704b854a8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YIP2-HFHoAMFssA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6319935f-693e2f2e5a0bcd9f690f21fa;Sampled=0 x-amzn-remapped-date: Thu, 08 Sep 2022 07:01:51 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: 4-H_LbXRjS1PJkVz9OIhwsaPfu8ZlL98zTZG--hdmij9Tc6KtmNSFQ== via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google date: Fri, 16 Sep 2022 21:51:13 GMT age: 23630 etag: "e139a0974317212f094fdbe59e26ca5cf6b9e56d" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7788 Md5: 7a22ab7dcdf50f4a297b8e117d336eae Sha1: e139a0974317212f094fdbe59e26ca5cf6b9e56d Sha256: 9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14e8614f-d7d5-4a87-adf0-ab2cfcfb023b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: cc24af0aedb89ab059b6706b8e51708547ea2ce2b2c2743425810b44af7c68c8 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5956 x-amzn-requestid: 19032fea-67c3-404f-bf3e-9b436a61a7f8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YeNW4G30oAMFw0w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63225c2b-3da099be3781af033658520f;Sampled=0 x-amzn-remapped-date: Wed, 14 Sep 2022 22:56:43 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: FU7qiAFNHIIxNo_zRH3xQzmMMORVZ4Q5W-GgwdhA5ZQJPokQssZv5A== via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google date: Fri, 16 Sep 2022 12:55:52 GMT age: 55751 etag: "ff29c630c2ed8a67fe5cd4622dc9f1d23234b58c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5956 Md5: 3e963daffb462e89d9d67e6193944cc3 Sha1: ff29c630c2ed8a67fe5cd4622dc9f1d23234b58c Sha256: cc24af0aedb89ab059b6706b8e51708547ea2ce2b2c2743425810b44af7c68c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc1024748-f90f-4a93-b16b-b8f8110102f2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bd0549ca87a0fb119e68cfd71d50118e3075cc8e99bcaa83761a9ab0c93ee2ea 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8892 x-amzn-requestid: 683b4d8c-3704-4db5-837c-8d27302173a1 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YRmxsHrToAMFo4A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-631d51a4-6e53a23464675f511588380b;Sampled=0 x-amzn-remapped-date: Sun, 11 Sep 2022 03:10:28 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: Q-ATn4hgPnfnvnHWdnHXkrwk2X21sAPPhL4AIfyuD08e4wBDsSrIkg== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google date: Fri, 16 Sep 2022 22:02:44 GMT age: 22939 etag: "b66a3b8245ed597751c5c17b63f45273ccacb3d4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8892 Md5: 2182aefe8078f268f77064b982353421 Sha1: b66a3b8245ed597751c5c17b63f45273ccacb3d4 Sha256: bd0549ca87a0fb119e68cfd71d50118e3075cc8e99bcaa83761a9ab0c93ee2ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bb2456b31c48e6ebc9595c2bb9972b74531e93dd02ec4571d5af614f2d116ec7 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6109 x-amzn-requestid: 271b006e-9d17-46ba-9eed-22fd638c4e9e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YQ2AhHZgIAMFlSg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-631d039c-444e7d6b22f2a08f7215a986;Sampled=0 x-amzn-remapped-date: Sat, 10 Sep 2022 21:37:32 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: clBnXbh8x6GItJ6ObFVEM4Es3jAKlfMS8CMGlU6RBf_eshZ_HfFkOA== via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google date: Fri, 16 Sep 2022 22:31:13 GMT age: 21230 etag: "c5b82c9d77851820b8d206573d5c03cd36d27a20" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6109 Md5: 8c35b7f5f8e1b0b24570a41b7d18533a Sha1: c5b82c9d77851820b8d206573d5c03cd36d27a20 Sha256: bb2456b31c48e6ebc9595c2bb9972b74531e93dd02ec4571d5af614f2d116ec7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98d68511-1d61-4e7e-9647-8c57b409e85e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 44aed2e381a512e648202a775c70b7e5ebd5ce8f2c8762bb24c8bb8ee9b98f4c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10127 x-amzn-requestid: d9194b5e-17bc-4e08-b1bb-97dda96ac30e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YknslF7KoAMF8xQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6324ecb6-56733ebe2050abfd16e2d5a1;Sampled=0 x-amzn-remapped-date: Fri, 16 Sep 2022 21:37:58 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: Meblc1VO8Te1dcBvdt5QsMM6ACc9gnE0OvPomm4vjJD-_IHDefh4zA== via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google date: Fri, 16 Sep 2022 21:50:26 GMT age: 23677 etag: "6b17fa76a13bca3d75efb59a2f4b04c4a43477b6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10127 Md5: 67046c783f8a224572cb8c70625cec67 Sha1: 6b17fa76a13bca3d75efb59a2f4b04c4a43477b6 Sha256: 44aed2e381a512e648202a775c70b7e5ebd5ce8f2c8762bb24c8bb8ee9b98f4c

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 939 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Date: Sat, 17 Sep 2022 04:11:12 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: PFjq6KdRPsznUFZ6xIrJUGw20A9CIge41r5AW1kxW1JE-oGlifUEug== 

                                        
                                            
Age: 828 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    91dd975a7b17b2922dd23c0e49314e40

                                                Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2

                                                Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.49

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
content-length: 5348 

                                        
                                            
last-modified: Sat, 20 Aug 2022 23:18:05 GMT 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Fri, 16 Sep 2022 04:35:16 GMT 

                                        
                                            
etag: "742edb4038f38bc533514982f3d2e861" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-C1 

                                        
                                            
x-amz-cf-id: 2HseKSWduRxdy8B7YECTjtR1D0zHTnGmY8kLeRSq6qbnabqNR0P6rw== 

                                        
                                            
age: 85786 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    742edb4038f38bc533514982f3d2e861

                                                Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1

                                                Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 17 Sep 2022 04:25:01 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 329 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Date: Sat, 17 Sep 2022 04:03:22 GMT 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Expires: Sat, 17 Sep 2022 04:33:30 GMT 

                                        
                                            
ETag: "1648230346554" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: 9a5eLL4Gj_uYzROznQsKgFCOYneaGIL9vg3JWNQuighVLONR0zwgug== 

                                        
                                            
Age: 1299 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 4511 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Sat, 17 Sep 2022 04:25:01 GMT 

                                        
                                            
Last-Modified: Sat, 17 Sep 2022 03:09:50 GMT 

                                        
                                            
Server: ECS (ska/F704) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    3db421016cf0e3ad25f324cf0faf0fac

                                                Sha1:   b15909de1105d4d2fb5be5b3920c454daf022445

                                                Sha256: 914b15f28636e0a5e851540ffb0625ecd09d0546b2f1f7af90b267ceebcf1d5d

                                        
                                            GET /px.gif?ch=2&rn=7.89448953482042 HTTP/1.1 

                                        
                                            
Host: ww25.hillsidearms.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://ww25.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id&subid1=20220917-1425-00f3-aafb-49e618bb986b 

                                        
                                            
Cookie: __gsas=ID=f4d9a286fa078b90:T=1663356403:S=ALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw; parking_session=2732ff8d-774d-3c09-ed00-169af7390b6d

                                         199.59.243.222

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/gif

                                        

                                        
                                            
Server: openresty 

                                        
                                            
Date: Sat, 17 Sep 2022 04:25:01 GMT 

                                        
                                            
Content-Length: 42 

                                        
                                            
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Expires: Thu, 01 Jan 1970 00:00:01 GMT 

                                        
                                            
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   42

                                                Md5:    d89746888da2d9510b64a9f031eaecd5

                                                Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a

                                                Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 17 Sep 2022 04:25:01 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    9730b7d7d5f0481f65712991a899f4b8

                                                Sha1:   facb4df5e4a4ac98b9bdd126c7dbb531cf0fe1e7

                                                Sha256: 15d7d8acbcd94d9ca8579cc31a9ec621e76408663bc4b047e5e127acb14334a6

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: eFxLnSGl5mIwbEiHblgALQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         44.237.239.70

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: lWRX4KyUoH8fDJ7NpZ4OG4nErVI= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /afs/ads?adtest=off&psid=7049491253&pcsa=false&channel=pid-bodis-gcontrol56%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol417&client=dp-bodis30_3ph&r=m&sct=ID%3Df4d9a286fa078b90%3AT%3D1663356403%3AS%3DALNI_MYvzS41WhLa4ncxHfGE8qwGHb_Icw&sc_status=6&hl=en&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2497786236455022&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17300953%2C17300956%2C17301020%2C17301022%2C17301094%2C17301097&format=r3&nocache=4481663388685015&num=0&output=afd_ads&domain_name=ww25.hillsidearms.com&v=3&bsl=8&pac=2&u_his=1&u_tz=0&dt=1663388685017&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1264&psh=79&frm=0&uio=-&cont=rs&jsid=caf&jsv=473734947&rurl=http%3A%2F%2Fww25.hillsidearms.com%2FDHL%2Fview%2Fmydhl%2Fq42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php%3Fid%26subid1%3D20220917-1425-00f3-aafb-49e618bb986b&adbw=master-1%3A1264 HTTP/1.1 

                                        
                                            
Host: afs.googlesyndication.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://ww25.hillsidearms.com/ 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: iframe 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.162

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=UTF-8

                                        

                                        
                                            
content-disposition: inline 

                                        
                                            
date: Sat, 17 Sep 2022 04:25:01 GMT 

                                        
                                            
expires: Sat, 17 Sep 2022 04:25:01 GMT 

                                        
                                            
cache-control: private, max-age=3600 

                                        
                                            
content-encoding: br 

                                        
                                            
server: gws 

                                        
                                            
content-length: 2133 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
set-cookie: CONSENT=PENDING+653; expires=Mon, 16-Sep-2024 04:25:01 GMT; path=/; domain=.googlesyndication.com; Secure 

                                        
                                            
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5666)

                                                Size:   2133

                                                Md5:    7dbb5aeea4ee2dcecb8471110e66d96a

                                                Sha1:   795d98039189838ad5991a95f83221778701980c

                                                Sha256: 77ae420e7f40fffae33874c4bcca4138146f0255ab65f5fd404fde0e0358672c

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 17 Sep 2022 04:25:02 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    4cc0aaf293fed6c16e1dde02c50c8f40

                                                Sha1:   e94f11cd8fa955f28856a02aa7115aa5f3626d98

                                                Sha256: b1592dc8fc0d63052f66b7be9b5ff1f562f6fbd05f6365ce828758bfbb3f1a12

                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 

                                        
                                            
Host: afs.googlesyndication.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://afs.googlesyndication.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         142.250.74.162

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript; charset=UTF-8

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui" 

                                        
                                            
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} 

                                        
                                            
date: Sat, 17 Sep 2022 04:25:02 GMT 

                                        
                                            
expires: Sat, 17 Sep 2022 04:25:02 GMT 

                                        
                                            
cache-control: private, max-age=3600 

                                        
                                            
etag: "5892873749078231012" 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-encoding: gzip 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (1885)

                                                Size:   54136

                                                Md5:    5850898c14a6b8f83dd0d9abf03fa941

                                                Sha1:   0e7a4e3dbb2ad97c0edfeefc682076c33da409d0

                                                Sha256: 0d9dbb684689d138250674a1b73dc041e0a75fa15d1488fc4a8ecbfdafbc1cef

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02" 

                                        
                                            
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9838 

                                        
                                            
Expires: Sat, 17 Sep 2022 07:09:01 GMT 

                                        
                                            
Date: Sat, 17 Sep 2022 04:25:03 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    4abe181b1d086cd7e122d7de32f63fb6

                                                Sha1:   e3482d4df0d59c247109ff7fb97f20ec6f142c4d

                                                Sha256: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02" 

                                        
                                            
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9838 

                                        
                                            
Expires: Sat, 17 Sep 2022 07:09:01 GMT 

                                        
                                            
Date: Sat, 17 Sep 2022 04:25:03 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    4abe181b1d086cd7e122d7de32f63fb6

                                                Sha1:   e3482d4df0d59c247109ff7fb97f20ec6f142c4d

                                                Sha256: 63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e43d1ff-79bc-430f-826f-2af5ae602556.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8500 

                                        
                                            
x-amzn-requestid: e1ca6cef-c033-4887-80cf-2014ab8e620c 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Ykn5cEnLIAMFrzA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6324ed09-3afc16cf66fef0e62dd6f3cc;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 16 Sep 2022 21:39:21 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: pPCI5VDX3PIldEnkLv-VNCFWuykiarYQdLYguNTfmbwxYCDVaS2EcA== 

                                        
                                            
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 16 Sep 2022 22:01:45 GMT 

                                        
                                            
age: 22998 

                                        
                                            
etag: "28ac45ef155c66dd79a306f14d3b38f597b6a32e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8500

                                                Md5:    d46a910081eb782408f1a2fa3c6aabba

                                                Sha1:   28ac45ef155c66dd79a306f14d3b38f597b6a32e

                                                Sha256: d5787a6a12d275555c627e3245b37d4e751148345a09d5671b343cfebe7173b4

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14e8614f-d7d5-4a87-adf0-ab2cfcfb023b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5956 

                                        
                                            
x-amzn-requestid: 19032fea-67c3-404f-bf3e-9b436a61a7f8 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: YeNW4G30oAMFw0w= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63225c2b-3da099be3781af033658520f;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 14 Sep 2022 22:56:43 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: FU7qiAFNHIIxNo_zRH3xQzmMMORVZ4Q5W-GgwdhA5ZQJPokQssZv5A== 

                                        
                                            
via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 16 Sep 2022 12:55:52 GMT 

                                        
                                            
age: 55751 

                                        
                                            
etag: "ff29c630c2ed8a67fe5cd4622dc9f1d23234b58c" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5956

                                                Md5:    3e963daffb462e89d9d67e6193944cc3

                                                Sha1:   ff29c630c2ed8a67fe5cd4622dc9f1d23234b58c

                                                Sha256: cc24af0aedb89ab059b6706b8e51708547ea2ce2b2c2743425810b44af7c68c8

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9ba7347-38d8-40e3-9b29-41a380f99ed5.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6109 

                                        
                                            
x-amzn-requestid: 271b006e-9d17-46ba-9eed-22fd638c4e9e 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: YQ2AhHZgIAMFlSg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-631d039c-444e7d6b22f2a08f7215a986;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 10 Sep 2022 21:37:32 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: clBnXbh8x6GItJ6ObFVEM4Es3jAKlfMS8CMGlU6RBf_eshZ_HfFkOA== 

                                        
                                            
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 16 Sep 2022 22:31:13 GMT 

                                        
                                            
age: 21230 

                                        
                                            
etag: "c5b82c9d77851820b8d206573d5c03cd36d27a20" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6109

                                                Md5:    8c35b7f5f8e1b0b24570a41b7d18533a

                                                Sha1:   c5b82c9d77851820b8d206573d5c03cd36d27a20

                                                Sha256: bb2456b31c48e6ebc9595c2bb9972b74531e93dd02ec4571d5af614f2d116ec7

URL	www.hillsidearms.com/DHL/view/mydhl/q42xa2hcnuxbvmnpccb8pene73dce75d92181ca956e737b3cb66db98.php?id
IP	103.224.212.221 (Australia)
ASN	#133618 Trellian Pty. Limited
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-09-17 04:25:11 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	3
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (11)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 103.224.212.221

Last 5 reports on ASN: Trellian Pty. Limited

Last 5 reports on domain: hillsidearms.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (1)

#1 JavaScript::Eval (size: 793) - SHA256: 5aff05f856534d1387fcda6210fe7ef655b932e2d9cfcf180158e8fa03f4279f

Executed Writes (0)

HTTP Transactions (34)

Overview

Domain Summary (11)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 103.224.212.221

Last 5 reports on ASN: Trellian Pty. Limited

Last 5 reports on domain: hillsidearms.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (1)

#1 JavaScript::Eval (size: 793) - SHA256: 5aff05f856534d1387fcda6210fe7ef655b932e2d9cfcf180158e8fa03f4279f

Executed Writes (0)

HTTP Transactions (34)

Network Intrusion Detection Systems