Report - k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW

Report Overview

URL

k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga
IP

104.17.120.10

ASN

#13335 CLOUDFLARENET
Submitted

2023-03-20T15:53:10Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

1
Threat Detection Systems

0

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
k12.corwin.com (2)	640532	2020-10-09T16:45:41Z	2023-03-24T06:20:04Z	1056	1002	104.17.121.10
r3.o.lencr.org (7)	344	2020-12-02T09:52:13Z	2023-03-25T18:12:03Z	2366	6204	23.33.119.27
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-25T18:14:26Z	782	2374	35.241.9.150
fonts.gstatic.com (2)	unknown	2014-09-09T02:40:21Z	2023-03-25T22:19:37Z	926	56378	142.250.74.35
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-26T05:11:12Z	413	5882	34.160.144.191
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-26T05:10:29Z	606	127	52.43.107.188
twitter.com (12)	123	2012-05-21T14:14:30Z	2023-03-26T05:12:44Z	12510	232696	104.244.42.129
img-getpocket.cdn.mozilla.net (5)	1631	2018-06-22T01:36:00Z	2023-03-26T05:09:08Z	2704	49250	34.120.237.76
pbs.twimg.com (13)	624	2012-09-06T02:07:06Z	2023-03-26T05:23:18Z	5563	287350	93.184.220.70
abs.twimg.com (216)	1724	2013-04-11T00:09:30Z	2023-03-26T07:24:53Z	103770	3434322	152.199.21.141
api.twitter.com (12)	1170	2012-05-21T04:09:21Z	2023-03-26T06:18:26Z	12272	14285	104.244.42.66
accounts.google.com (1)	81	2016-03-20T13:44:49Z	2023-03-26T06:56:18Z	361	79724	216.58.207.237
appleid.cdn-apple.com (1)	3288	2013-09-15T19:16:35Z	2023-03-26T09:08:54Z	407	17666	23.43.132.13
play.google.com (1)	34	2013-05-31T01:24:35Z	2023-03-26T07:58:19Z	429	792	142.250.74.142
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-26T05:11:59Z	333	391	34.117.237.239
ocsp.digicert.com (5)	86	2012-05-21T09:02:23Z	2023-03-26T05:18:47Z	1705	3238	192.229.221.95
ocsp.pki.goog (6)	175	2018-07-01T08:43:07Z	2023-03-26T05:10:41Z	2058	4197	142.250.74.163

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-03-20T15:53:04Z	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (288)

	URL	IP	Response	Size
	k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga	104.17.121.10	301 Moved Permanently	0
Search urlquery URL k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga DOMAIN corwin.com FQDN k12.corwin.com IP 104.17.121.10 Hash d41d8cd98f00b204e9800998ecf8427e External sources Mnemonic PDNS FQDN k12.corwin.com DOMAIN corwin.com IP 104.17.121.10 VirusTotal HASH da39a3ee5e6b4b0d3255bfef95601890afd80709 FQDN k12.corwin.com DOMAIN corwin.com IP 104.17.121.10 crt.sh FQDN k12.corwin.com DOMAIN corwin.com URL HTTP/1.1 k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga IP 104.17.121.10:0 ASN #13335 CLOUDFLARENET Magic Size 0 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga HTTP/1.1 Host: k12.corwin.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1` `HTTP/1.1 301 Moved Permanently Date: Mon, 20 Mar 2023 15:52:58 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Mon, 20 Mar 2023 16:52:58 GMT Location: https://k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga Vary: Accept-Encoding Server: cloudflare CF-RAY: 7aaf20130878b509-OSL`

	r3.o.lencr.org/	23.33.119.27	200 OK	503
Search urlquery URL r3.o.lencr.org/ DOMAIN lencr.org FQDN r3.o.lencr.org IP 23.33.119.27 Hash ec332b81a27117ce9c16b67a5a8e4fac External sources Mnemonic PDNS FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.33.119.27 VirusTotal HASH b6d2afa2c859d000ad830d3d8d73f57bac6ffce2 FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.33.119.27 crt.sh FQDN r3.o.lencr.org DOMAIN lencr.org URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash ec332b81a27117ce9c16b67a5a8e4fac b6d2afa2c859d000ad830d3d8d73f57bac6ffce2 1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F" Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5698 Expires: Mon, 20 Mar 2023 17:27:56 GMT Date: Mon, 20 Mar 2023 15:52:58 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503
Search urlquery URL r3.o.lencr.org/ DOMAIN lencr.org FQDN r3.o.lencr.org IP 23.33.119.27 Hash 00e304a3fc0c2f01af0e94fcefe0ca40 External sources Mnemonic PDNS FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.33.119.27 VirusTotal HASH 833969e75e5e13e823c8d97ee59a9821eb157ee3 FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.33.119.27 crt.sh FQDN r3.o.lencr.org DOMAIN lencr.org URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 00e304a3fc0c2f01af0e94fcefe0ca40 833969e75e5e13e823c8d97ee59a9821eb157ee3 c2b7f7ae4861f2dd16867de54c7e47d95582de77887f523841d9683a369d20a7 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C2B7F7AE4861F2DD16867DE54C7E47D95582DE77887F523841D9683A369D20A7" Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15722 Expires: Mon, 20 Mar 2023 20:15:00 GMT Date: Mon, 20 Mar 2023 15:52:58 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503
Search urlquery URL r3.o.lencr.org/ DOMAIN lencr.org FQDN r3.o.lencr.org IP 23.33.119.27 Hash 4e6141892ec4705c6a0134f3157b969d External sources Mnemonic PDNS FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.33.119.27 VirusTotal HASH 4169fdea42b0fa9cb565e14b8e8fdb293575c78e FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.33.119.27 crt.sh FQDN r3.o.lencr.org DOMAIN lencr.org URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 4e6141892ec4705c6a0134f3157b969d 4169fdea42b0fa9cb565e14b8e8fdb293575c78e 905537ef3e3a4a9030391b44bd6ac6bb5d7c9ec752b1821d683dfbf483096163 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "905537EF3E3A4A9030391B44BD6AC6BB5D7C9EC752B1821D683DFBF483096163" Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10182 Expires: Mon, 20 Mar 2023 18:42:40 GMT Date: Mon, 20 Mar 2023 15:52:58 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939
Search urlquery URL firefox.settings.services.mozilla.com/v1/ DOMAIN mozilla.com FQDN firefox.settings.services.mozilla.com IP 35.241.9.150 Hash bc86ef2a0cee04915bc360f5821adc8f External sources Mnemonic PDNS FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com IP 35.241.9.150 VirusTotal HASH 3658f9028cce204d38f7f48fcfaa2a8e4f54383a FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com IP 35.241.9.150 crt.sh FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE Magic JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 Hash bc86ef2a0cee04915bc360f5821adc8f 3658f9028cce204d38f7f48fcfaa2a8e4f54383a aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 20 Mar 2023 15:27:17 GMT content-type: application/json age: 1541 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain	34.160.144.191	200 OK	5348
Search urlquery URL content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain DOMAIN mozilla.net FQDN content-signature-2.cdn.mozilla.net IP 34.160.144.191 Hash e7bace7c1e04d44012e37ddffe36e5d5 External sources Mnemonic PDNS FQDN content-signature-2.cdn.mozilla.net DOMAIN mozilla.net IP 34.160.144.191 VirusTotal HASH 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 FQDN content-signature-2.cdn.mozilla.net DOMAIN mozilla.net IP 34.160.144.191 crt.sh FQDN content-signature-2.cdn.mozilla.net DOMAIN mozilla.net URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain IP 34.160.144.191:0 ASN #15169 GOOGLE Magic PEM certificate\012- , ASCII text Size 5348 Hash e7bace7c1e04d44012e37ddffe36e5d5 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK x-amz-id-2: ISPPVeuxUPNhVBDwewN8QZEx/SlgXojYFXjAKGiDgX4FRP/USwrNkPDvn/+bY6oYjDh7qvDVUXI= x-amz-request-id: CPQVKC5AA5T6SW63 x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 20 Mar 2023 14:58:44 GMT age: 3254 last-modified: Sat, 11 Mar 2023 16:53:15 GMT etag: "e7bace7c1e04d44012e37ddffe36e5d5" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12
Search urlquery URL contile.services.mozilla.com/v1/tiles DOMAIN mozilla.com FQDN contile.services.mozilla.com IP 34.117.237.239 Hash 23e88fb7b99543fb33315b29b1fad9d6 External sources Mnemonic PDNS FQDN contile.services.mozilla.com DOMAIN mozilla.com IP 34.117.237.239 VirusTotal HASH a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce FQDN contile.services.mozilla.com DOMAIN mozilla.com IP 34.117.237.239 crt.sh FQDN contile.services.mozilla.com DOMAIN mozilla.com URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE Magic JSON data\012- , ASCII text, with no line terminators Size 12 Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Mon, 20 Mar 2023 15:52:58 GMT content-type: application/json content-length: 12 access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga	104.17.121.10	302 Found	154
Search urlquery URL k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga DOMAIN corwin.com FQDN k12.corwin.com IP 104.17.121.10 Hash c7546d108c90657dc71cf43b683c407d External sources Mnemonic PDNS FQDN k12.corwin.com DOMAIN corwin.com IP 104.17.121.10 VirusTotal HASH 898d8db3b47994bc479f697469edd1baaae4c261 FQDN k12.corwin.com DOMAIN corwin.com IP 104.17.121.10 crt.sh FQDN k12.corwin.com DOMAIN corwin.com URL HTTP/2 k12.corwin.com/optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga IP 104.17.121.10:0 ASN #13335 CLOUDFLARENET Magic HTML document text\012- HTML document text\012- HTML document, ASCII text Size 154 Hash c7546d108c90657dc71cf43b683c407d 898d8db3b47994bc479f697469edd1baaae4c261 1658ff4825784227b3ed17b4866be0bba3e905d2abc9a81cb49e39324548120b HTTP Headers GET /optiext/optiextension.dll?ID=MefMhtltj4yZspqpfWoFoXSr1YbDKYv3L6uIQYIjPZEi3QawpIDGbsHzE4bVLtgNSUi1XW_37xk592EZdCpjFrnCyy4KJb+mPK7k4Yga HTTP/1.1 Host: k12.corwin.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 `HTTP/2 302 Found date: Mon, 20 Mar 2023 15:52:58 GMT content-type: text/html; charset=UTF-8 content-length: 154 location: https://twitter.com/CorwinPress referrer-policy: strict-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubdomains cf-cache-status: DYNAMIC server: cloudflare cf-ray: 7aaf2014dc9eb51d-OSL X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329
Search urlquery URL firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US DOMAIN mozilla.com FQDN firefox.settings.services.mozilla.com IP 35.241.9.150 Hash 0333b0655111aa68de771adfcc4db243 External sources Mnemonic PDNS FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com IP 35.241.9.150 VirusTotal HASH 63f295a144ac87a7c8e23417626724eeca68a7eb FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com IP 35.241.9.150 crt.sh FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE Magic JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 20 Mar 2023 15:17:21 GMT age: 2137 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	ocsp.digicert.com/	192.229.221.95	200 OK	312
Search urlquery URL ocsp.digicert.com/ DOMAIN digicert.com FQDN ocsp.digicert.com IP 192.229.221.95 Hash cdebe385022d922b57c9f64e630ad62d External sources Mnemonic PDNS FQDN ocsp.digicert.com DOMAIN digicert.com IP 192.229.221.95 VirusTotal HASH 9bd6a81941477160563b0c5b9c7d868d66f7663c FQDN ocsp.digicert.com DOMAIN digicert.com IP 192.229.221.95 crt.sh FQDN ocsp.digicert.com DOMAIN digicert.com URL HTTP/1.1 ocsp.digicert.com/ IP 192.229.221.95:0 ASN #15133 EDGECAST Magic data Size 312 Hash cdebe385022d922b57c9f64e630ad62d 9bd6a81941477160563b0c5b9c7d868d66f7663c 625e89534c9acc1f57488a20b91e673f253f2d3db99784ed21374192473a4912 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5551 Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Mon, 20 Mar 2023 15:52:58 GMT Last-Modified: Mon, 20 Mar 2023 14:20:27 GMT Server: ECAcc (ska/F756) X-Cache: HIT Content-Length: 312`

	r3.o.lencr.org/	23.33.119.27	200 OK	503
Search urlquery URL r3.o.lencr.org/ DOMAIN lencr.org FQDN r3.o.lencr.org IP 23.33.119.27 Hash 4c195a3fc0c2abb831630cef1dcfa770 External sources Mnemonic PDNS FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.33.119.27 VirusTotal HASH eda338de3063640556177b9db364c33193d7f6dc FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.33.119.27 crt.sh FQDN r3.o.lencr.org DOMAIN lencr.org URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 4c195a3fc0c2abb831630cef1dcfa770 eda338de3063640556177b9db364c33193d7f6dc c22eb0537cd79666b82fe61dd77fe9b0b3c059a4c65d405412acfc2c6800b444 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444" Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5737 Expires: Mon, 20 Mar 2023 17:28:36 GMT Date: Mon, 20 Mar 2023 15:52:59 GMT Connection: keep-alive`

	abs.twimg.com/responsive-web/client-web/vendor.3a0e728a.js	152.199.21.141	200 OK	194810
Search urlquery URL abs.twimg.com/responsive-web/client-web/vendor.3a0e728a.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash 6d6e33e3b76d419887ce11e7936fc3e2 External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH 050122a50233916aa818073ce5e09c9f6fd126e3 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/vendor.3a0e728a.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic Unicode text, UTF-8 text, with very long lines (64683), with no line terminators Size 194810 Hash 6d6e33e3b76d419887ce11e7936fc3e2 050122a50233916aa818073ce5e09c9f6fd126e3 ea095b31d03c9c02bbe70ca8c5633cf60068b1722c907ff713e3a69471470000 HTTP Headers `GET /responsive-web/client-web/vendor.3a0e728a.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 936447 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "2jg4k+dM/Gz4ka//tcI60Q==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Thu, 09 Mar 2023 19:08:16 GMT perf: 7626143928 server: ECAcc (ska/F6EB) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: 937888eecd5c841c2c62c2801cdfda2e809a5a0b042460bcd68edcb8e2a3cc5b x-content-type-options: nosniff x-response-time: 63 x-ton-expected-size: 635768 x-transaction-id: b90b7cf5c574c774 content-length: 194810 X-Firefox-Spdy: h2

	abs.twimg.com/responsive-web/client-web/main.ef5f25ea.js	152.199.21.141	200 OK	354811
Search urlquery URL abs.twimg.com/responsive-web/client-web/main.ef5f25ea.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash d8d2a031b37aaecf6ddaf5dfdd736dec External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH 7823c7ad6f1c93ce796b5c326cf1cea04602f046 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/main.ef5f25ea.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic ASCII text, with very long lines (65536), with no line terminators Size 354811 Hash d8d2a031b37aaecf6ddaf5dfdd736dec 7823c7ad6f1c93ce796b5c326cf1cea04602f046 ff9fb1aedfa70e36ec5f12f57123d86466cee0881598c334b16d1fc594fe6695 HTTP Headers `GET /responsive-web/client-web/main.ef5f25ea.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 220313 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "2iRQqOWV7TrgGVv8EIlmTg==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Sat, 18 Mar 2023 02:06:56 GMT perf: 7626143928 server: ECAcc (ska/F6DD) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: d2cf045787cbb85fe036e52385ca571d1aa6a0f58fbb3457e9225b079e538560 x-content-type-options: nosniff x-response-time: 110 x-ton-expected-size: 2128057 x-transaction-id: 41b9b5722f9a3b47 content-length: 354811 X-Firefox-Spdy: h2

	abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.UserProfile.99a9f8aa.js	152.199.21.141	200 OK	9734
Search urlquery URL abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.UserProfile.99a9f8aa.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash a83097c4a66728dd3af6b9fefe89789c External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH 6e974be857bb298af85defd5a1ac769aa4266932 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/shared~bundle.TwitterArticles~bundle.UserProfile.99a9f8aa.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic Unicode text, UTF-8 text, with very long lines (27894) Size 9734 Hash a83097c4a66728dd3af6b9fefe89789c 6e974be857bb298af85defd5a1ac769aa4266932 442f5b00818da2b0d8dbb173a85d1f75287c674a5589f9f1722e83fb7ed3331c HTTP Headers `GET /responsive-web/client-web/shared~bundle.TwitterArticles~bundle.UserProfile.99a9f8aa.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 362447 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "iGtaOWSLP/SZGEZCwr4Lkg==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Thu, 16 Mar 2023 10:39:37 GMT perf: 7626143928 server: ECAcc (ska/F737) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: 440d5fb5991eabaec9b8361d3eced6597d102e06bd8321af814f8efdaec978b2 x-content-type-options: nosniff x-response-time: 13 x-ton-expected-size: 28068 x-transaction-id: dc8cc9d9c258d69f content-length: 9734 X-Firefox-Spdy: h2

	abs.twimg.com/responsive-web/client-web/bundle.UserProfile.15fb9c2a.js	152.199.21.141	200 OK	43950
Search urlquery URL abs.twimg.com/responsive-web/client-web/bundle.UserProfile.15fb9c2a.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash e167693694cf6a627b0692c15221f07d External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH 9402a0446ebc856d9f1f1c3cace7f068e6a57472 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/bundle.UserProfile.15fb9c2a.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic ASCII text, with very long lines (65536), with no line terminators Size 43950 Hash e167693694cf6a627b0692c15221f07d 9402a0446ebc856d9f1f1c3cace7f068e6a57472 6ee2b276c7785a41b25100f2bc434dcec06b18df14600574baa57a03309f8847 HTTP Headers `GET /responsive-web/client-web/bundle.UserProfile.15fb9c2a.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 220400 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "pS7LHNAQaHOUjN5+Dfh/mw==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Sat, 18 Mar 2023 02:06:55 GMT perf: 7626143928 server: ECAcc (ska/F796) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: 9fc9cd2c79e6cd307a467c2bc467df34ca7cff488da4b1683199f7f9c18c2f11 x-content-type-options: nosniff x-response-time: 19 x-ton-expected-size: 206868 x-transaction-id: e6c202f31ff479c7 content-length: 43950 X-Firefox-Spdy: h2

	push.services.mozilla.com/	52.43.107.188	101 Switching Protocols	0
Search urlquery URL push.services.mozilla.com/ DOMAIN mozilla.com FQDN push.services.mozilla.com IP 52.43.107.188 Hash d41d8cd98f00b204e9800998ecf8427e External sources Mnemonic PDNS FQDN push.services.mozilla.com DOMAIN mozilla.com IP 52.43.107.188 VirusTotal HASH da39a3ee5e6b4b0d3255bfef95601890afd80709 FQDN push.services.mozilla.com DOMAIN mozilla.com IP 52.43.107.188 crt.sh FQDN push.services.mozilla.com DOMAIN mozilla.com URL HTTP/1.1 push.services.mozilla.com/ IP 52.43.107.188:0 ASN #16509 AMAZON-02 Magic Size 0 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: DY2/P4NJEV4m8CfkdJo4pw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: mBzjPN29hnk2BO0VY+9swQWSaOM=`

	abs.twimg.com/responsive-web/client-web/shared~ondemand.Dropdown~bundle.Communities~bundle.ReaderMode~ondemand.Verified~loader.WideLayout.904cb78a.js	152.199.21.141	200 OK	2185
Search urlquery URL abs.twimg.com/responsive-web/client-web/shared~ondemand.Dropdown~bundle.Communities~bundle.ReaderMode~ondemand.Verified~loader.WideLayout.904cb78a.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash 07a70783e7678319b9a656b4375c9f09 External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH 633ffb1a450c78620a2493a56680aba2d82a6f58 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/shared~ondemand.Dropdown~bundle.Communities~bundle.ReaderMode~ondemand.Verified~loader.WideLayout.904cb78a.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic ASCII text, with very long lines (5062) Size 2185 Hash 07a70783e7678319b9a656b4375c9f09 633ffb1a450c78620a2493a56680aba2d82a6f58 96607f277510feb3bb1dded421d9bc131f9df5ca8a53157c282f3250a96f3aa1 HTTP Headers GET /responsive-web/client-web/shared~ondemand.Dropdown~bundle.Communities~bundle.ReaderMode~ondemand.Verified~loader.WideLayout.904cb78a.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 1777014 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "AuVRrNQTBedA2i53KARhdw==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Tue, 28 Feb 2023 01:54:14 GMT perf: 7626143928 server: ECAcc (ska/F74E) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: fd1f9054fa55fad94f38cfe44ebf097f8dfdd24b28d4146f868326909994e299 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 5273 x-transaction-id: 73860c67b1352172 content-length: 2185 X-Firefox-Spdy: h2

	abs.twimg.com/responsive-web/client-web/ondemand.Dropdown.c1ce90ba.js	152.199.21.141	200 OK	1498
Search urlquery URL abs.twimg.com/responsive-web/client-web/ondemand.Dropdown.c1ce90ba.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash aa12bb9d5432878c207e0c74c8e90eda External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH 18ba739f4dd0ecf9a29dc368caf3d9f8108394e6 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/ondemand.Dropdown.c1ce90ba.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic ASCII text, with very long lines (3628) Size 1498 Hash aa12bb9d5432878c207e0c74c8e90eda 18ba739f4dd0ecf9a29dc368caf3d9f8108394e6 738afc94b74bad3a4dac757123c009c40edeb71a96305a2ccab9f38042a469cc HTTP Headers `GET /responsive-web/client-web/ondemand.Dropdown.c1ce90ba.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 3536358 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "zmOsN336Uf3+a4S5cHmDcQ==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Tue, 07 Feb 2023 16:55:28 GMT perf: 7626143928 server: ECAcc (ska/F6BE) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: 7f6d9a9a27763d044518f9254b106b50cc95030dd026a526ef4b8fb7c1126ee2 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 3759 x-transaction-id: 9540614c89b41e96 content-length: 1498 X-Firefox-Spdy: h2

	abs.twimg.com/responsive-web/client-web/endpoints.Jot.5281b88a.js	152.199.21.141	200 OK	353
Search urlquery URL abs.twimg.com/responsive-web/client-web/endpoints.Jot.5281b88a.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash 8eff962f507c76cf42a9d2a24d6fc4fe External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH c716d4b79694db244b6e880f5611e412a8cbda47 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/endpoints.Jot.5281b88a.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic ASCII text, with very long lines (433) Size 353 Hash 8eff962f507c76cf42a9d2a24d6fc4fe c716d4b79694db244b6e880f5611e412a8cbda47 623ed518b442229243b2e863f8d85a7de310dc1e1f3c218e0290b6566fcc10e0 HTTP Headers `GET /responsive-web/client-web/endpoints.Jot.5281b88a.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 4130937 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "uJvfjTlxM4QnIMg2E0IdWQ==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Tue, 31 Jan 2023 19:57:41 GMT perf: 7626143928 server: ECAcc (ska/F773) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: ecae5f91ecb4f2956a9f5f0b7014410527fa9835db74c17dd18905b069ed6164 x-content-type-options: nosniff x-response-time: 10 x-ton-expected-size: 560 x-transaction-id: 4c2a592dee624be6 content-length: 353 X-Firefox-Spdy: h2

	abs.twimg.com/responsive-web/client-web/api.dec5afda.js	152.199.21.141	200 OK	63048
Search urlquery URL abs.twimg.com/responsive-web/client-web/api.dec5afda.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash 18e91bae6690364311cb198c8dd39da2 External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH 992cf5dee486d5a72360a924ebd49852a68c2a64 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/api.dec5afda.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic ASCII text, with very long lines (65536), with no line terminators Size 63048 Hash 18e91bae6690364311cb198c8dd39da2 992cf5dee486d5a72360a924ebd49852a68c2a64 9a07fb9302e4c15d14b478547e9f7c9bce0775cfdd1093c8955c7c9825cce4ac HTTP Headers `GET /responsive-web/client-web/api.dec5afda.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 220313 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "nhn4+GCD/bf4IA+liT2X7Q==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Sat, 18 Mar 2023 02:06:55 GMT perf: 7626143928 server: ECAcc (ska/F6F1) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: 6988691294071ab7c9fafc201dc9467ed75275b7f286d31aecf6fd353c481612 x-content-type-options: nosniff x-response-time: 27 x-ton-expected-size: 369734 x-transaction-id: 27ae716081d40803 content-length: 63048 X-Firefox-Spdy: h2

	abs.twimg.com/responsive-web/client-web/i18n/en.074ac82a.js	152.199.21.141	200 OK	6961
Search urlquery URL abs.twimg.com/responsive-web/client-web/i18n/en.074ac82a.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash dd62ea8ec7e8b0b722d934113e376a17 External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH 35d5c71fbd1ccdd0b567f0c859be38de27db46a7 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/i18n/en.074ac82a.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic ASCII text, with very long lines (49957), with no line terminators Size 6961 Hash dd62ea8ec7e8b0b722d934113e376a17 35d5c71fbd1ccdd0b567f0c859be38de27db46a7 981fe80eb48ae72a66ed0168050c42ecc331ebf559dfc5cf95a7edafbe0a0e21 HTTP Headers `GET /responsive-web/client-web/i18n/en.074ac82a.js HTTP/1.1 Host: abs.twimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://twitter.com Connection: keep-alive Referer: https://twitter.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-encoding: gzip accept-ranges: bytes access-control-allow-origin: * age: 330562 content-type: application/javascript; charset=utf-8 date: Mon, 20 Mar 2023 15:52:59 GMT etag: "3HyspGPeOgb5Olvud52Crg==" expires: Tue, 19 Mar 2024 15:52:59 GMT last-modified: Thu, 16 Mar 2023 19:41:17 GMT perf: 7626143928 server: ECAcc (ska/F747) strict-transport-security: max-age=631138519 surrogate-key: twitter-assets timing-allow-origin: https://twitter.com, https://mobile.twitter.com vary: Accept-Encoding x-cache: HIT x-connection-hash: b62b9aa05340c49264f72d1d4588ca26b4c5fdacbbd3ee071e2bda6fc092ed4e x-content-type-options: nosniff x-response-time: 41 x-ton-expected-size: 388363 x-transaction-id: d3d910f1d49fe654 content-length: 117285 X-Firefox-Spdy: h2

	abs.twimg.com/responsive-web/client-web/endpoints.Settings.0a7f4c4a.js	152.199.21.141	200 OK	2655
Search urlquery URL abs.twimg.com/responsive-web/client-web/endpoints.Settings.0a7f4c4a.js DOMAIN twimg.com FQDN abs.twimg.com IP 152.199.21.141 Hash 158f1ff89fec7c35c809ad027b671f25 External sources Mnemonic PDNS FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 VirusTotal HASH c8dde475b7d182f6f5c98acabea48cae30d38597 FQDN abs.twimg.com DOMAIN twimg.com IP 152.199.21.141 crt.sh FQDN abs.twimg.com DOMAIN twimg.com URL HTTP/2 abs.twimg.com/responsive-web/client-web/endpoints.Settings.0a7f4c4a.js IP 152.199.21.141:0 ASN #15133 EDGECAST Magic ASCII text, with very long lines (7526)

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (128)

#1 JS:Script (size: 9278)

#2 JS:Script (size: 2221)

#3 JS:Script (size: 68725)

#4 JS:Script (size: 2506)

#5 JS:Script (size: 2758)

#6 JS:Script (size: 2249)

#7 JS:Script (size: 14731)

#8 JS:Script (size: 2076)

#9 JS:Script (size: 2192)

#10 JS:Script (size: 1487)

#11 JS:Script (size: 9845)

#12 JS:Script (size: 151952)

#13 JS:Script (size: 43519)

#14 JS:Script (size: 1598)

#15 JS:Script (size: 2327)

#16 JS:Script (size: 406)

#17 JS:Script (size: 2198)

#18 JS:Script (size: 3759)

#19 JS:Script (size: 1634)

#20 JS:Script (size: 2563)

#21 JS:Script (size: 9844)

#22 JS:Script (size: 310757)

#23 JS:Script (size: 3116)

#24 JS:Script (size: 2438)

#25 JS:Script (size: 0)

#26 JS:Script (size: 21314)

#27 JS:Script (size: 42451)

#28 JS:Script (size: 11558)

#29 JS:Script (size: 4581)

#30 JS:Script (size: 155490)

#31 JS:Script (size: 2002)

#32 JS:Script (size: 2983)

#33 JS:Script (size: 9309)

#34 JS:Script (size: 3596)

#35 JS:Script (size: 1697)

#36 JS:Script (size: 1297)

#37 JS:Script (size: 1927)

#38 JS:Script (size: 25195)

#39 JS:Script (size: 6815)

#40 JS:Script (size: 2128057)

#41 JS:Script (size: 452)

#42 JS:Script (size: 5109)

#43 JS:Script (size: 7819)

#44 JS:Script (size: 99805)

#45 JS:Script (size: 99773)

#46 JS:Script (size: 1917)

#47 JS:Script (size: 4897)

#48 JS:Script (size: 25446)

#49 JS:Script (size: 2890)

#50 JS:Script (size: 13805)

#51 JS:Script (size: 7658)

#52 JS:Script (size: 4970)

#53 JS:Script (size: 29955)

#54 JS:Script (size: 92392)

#55 JS:Script (size: 4335)

#56 JS:Script (size: 17089)