hxxp://blx[.]gg

Analysis

max time kernel
0s
max time network
896s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240729-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
04/01/2025, 08:19 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://blx.gg

Score

6^/10

discovery

Malware Config

Signatures

Reads AppArmor ptrace settings 1 TTPs 1 IoCs

Discovery of allowed ptrace capabilities by AppArmor.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/security/apparmor/features/ptrace	snap

Changes its process name 3 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	pool-spawner	3609	gsettings
Changes the process name, possibly in an attempt to hide itself	gmain	3610	gsettings
Changes the process name, possibly in an attempt to hide itself	dconf worker	3611	gsettings

Enumerates kernel/hardware configuration 1 TTPs 20 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/security/apparmor/features/query	snap
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	snap-seccomp
File opened for reading	/sys/kernel/security/apparmor/features/dbus/mask	dbus-daemon
File opened for reading	/sys/kernel/security/apparmor/features/dbus	snap
File opened for reading	/sys/kernel/security/apparmor/features/ipc	snap
File opened for reading	/sys/kernel/security/apparmor/features/signal	snap
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	firefox
File opened for reading	/sys/kernel/security/apparmor/features/file	snap
File opened for reading	/sys/kernel/security/apparmor/features/network	snap
File opened for reading	/sys/kernel/security/apparmor/features/network_v8	snap
File opened for reading	/sys/kernel/security/apparmor/features/policy	snap
File opened for reading	/sys/kernel/security/apparmor/features/rlimit	snap
File opened for reading	/sys/kernel/security/apparmor/features/caps	snap
File opened for reading	/sys/kernel/security/apparmor/features/namespaces	snap
File opened for reading	/sys/kernel/security/apparmor/features	snap
File opened for reading	/sys/kernel/security/apparmor/features/domain	snap
File opened for reading	/sys/kernel/security/apparmor/features/io_uring	snap
File opened for reading	/sys/kernel/security/apparmor/features/mount	snap
File opened for reading	/sys/module/apparmor/parameters/enabled	dbus-daemon
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	snap

Reads runtime system information 43 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/mounts	firefox
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/filesystems	gsettings
File opened for reading	/proc/cmdline	firefox
File opened for reading	/proc/mounts	dbus-daemon
File opened for reading	/proc/filesystems	gsettings
File opened for reading	/proc/cgroups	snap
File opened for reading	/proc/cmdline	snap
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/fd	dbus-send
File opened for reading	/proc/3554/cmdline	dbus-daemon
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/mounts	snap
File opened for reading	/proc/self/mountinfo	snap
File opened for reading	/proc/self/fd	dbus-daemon
File opened for reading	/proc/filesystems	dbus-daemon
File opened for reading	/proc/3545/status	dbus-daemon
File opened for reading	/proc/cgroups	firefox
File opened for reading	/proc/self/fd	dbus-send
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/3540/cmdline	dbus-daemon
File opened for reading	/proc/3545/attr/apparmor/current	dbus-daemon
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/3537/cgroup	snap
File opened for reading	/proc/sys/kernel/cap_last_cap	dbus-daemon
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/self/maps	grep
File opened for reading	/proc/filesystems	gsettings
File opened for reading	/proc/sys/kernel/seccomp/actions_avail	snap
File opened for reading	/proc/sys/kernel/random/uuid	snap
File opened for reading	/proc/self/fd	dbus-launch

/usr/bin/firefox
firefox -new-tab http://blx.gg
1⤵
PID:3537
- /usr/bin/xdg-settings
  xdg-settings get default-web-browser
  2⤵
  PID:3539
- - /usr/bin/dbus-send
    dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
    3⤵
    - Reads runtime system information
    PID:3540
  - - /usr/bin/dbus-launch
      dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
      4⤵
      Reads runtime system information
      PID:3541
    - - /usr/bin/dbus-daemon
        
        /usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
        5⤵
        Enumerates kernel/hardware configuration
        Reads runtime system information
        
        PID:3543
- - /usr/bin/xprop
    xprop -root _DT_SAVE_MODE
    3⤵
    PID:3546
- - /usr/bin/grep
    grep " = \\\"xfce4\\\"\$"
    3⤵
    - Reads runtime system information
    PID:3547
- - /usr/bin/xprop
    xprop -root
    3⤵
    PID:3548
- - /usr/bin/grep
    grep -i "^xfce_desktop_window"
    3⤵
    - Reads runtime system information
    PID:3549
- - /usr/bin/grep
    grep -q "^Enlightenment"
    3⤵
    - Reads runtime system information
    PID:3551
- - /usr/bin/uname
    uname
    3⤵
    PID:3552
- - /usr/bin/xdg-mime
    xdg-mime query default x-scheme-handler/http
    3⤵
    PID:3553
  - - /usr/bin/dbus-send
      dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
      4⤵
      Reads runtime system information
      PID:3554
    - - /usr/bin/dbus-launch
        
        dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
        5⤵
        
        PID:3555
  - - /usr/bin/xprop
      xprop -root _DT_SAVE_MODE
      4⤵
      PID:3556
  - - /usr/bin/grep
      grep " = \\\"xfce4\\\"\$"
      4⤵
      Reads runtime system information
      PID:3557
  - - /usr/bin/xprop
      xprop -root
      4⤵
      PID:3558
  - - /usr/bin/grep
      grep -i "^xfce_desktop_window"
      4⤵
      Reads runtime system information
      PID:3559
  - - /usr/bin/grep
      grep -q "^Enlightenment"
      4⤵
      Reads runtime system information
      PID:3561
  - - /usr/bin/uname
      uname
      4⤵
      PID:3562
  - - /usr/bin/sed
      sed "s/:/ /g"
      4⤵
      Reads runtime system information
      PID:3565
  - - /usr/bin/grep
      grep "x-scheme-handler/http=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
      4⤵
      Reads runtime system information
      PID:3567
  - - /usr/bin/head
      head -n 1
      4⤵
      PID:3568
  - - /usr/bin/cut
      cut -d "=" -f 2
      4⤵
      PID:3569
  - - /usr/bin/cut
      cut -d ";" -f 1
      4⤵
      PID:3570
  - - /usr/bin/grep
      grep "x-scheme-handler/http=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
      4⤵
      Reads runtime system information
      PID:3572
  - - /usr/bin/head
      head -n 1
      4⤵
      PID:3573
  - - /usr/bin/cut
      cut -d "=" -f 2
      4⤵
      PID:3574
  - - /usr/bin/cut
      cut -d ";" -f 1
      4⤵
      PID:3575
  - - /usr/bin/grep
      grep "x-scheme-handler/http=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
      4⤵
      Reads runtime system information
      PID:3577
  - - /usr/bin/head
      head -n 1
      4⤵
      PID:3578
  - - /usr/bin/cut
      cut -d "=" -f 2
      4⤵
      PID:3579
  - - /usr/bin/cut
      cut -d ";" -f 1
      4⤵
      PID:3580
  - - /usr/bin/grep
      grep "x-scheme-handler/http=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
      4⤵
      Reads runtime system information
      PID:3582
  - - /usr/bin/head
      head -n 1
      4⤵
      PID:3583
  - - /usr/bin/cut
      cut -d "=" -f 2
      4⤵
      PID:3584
  - - /usr/bin/cut
      cut -d ";" -f 1
      4⤵
      PID:3585
  - - /usr/bin/grep
      grep "x-scheme-handler/http=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
      4⤵
      Reads runtime system information
      PID:3587
  - - /usr/bin/head
      head -n 1
      4⤵
      PID:3588
  - - /usr/bin/cut
      cut -d "=" -f 2
      4⤵
      PID:3589
  - - /usr/bin/cut
      cut -d ";" -f 1
      4⤵
      PID:3590
  - - /usr/bin/grep
      grep "x-scheme-handler/http=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
      4⤵
      Reads runtime system information
      PID:3593
  - - /usr/bin/head
      head -n 1
      4⤵
      PID:3594
  - - /usr/bin/cut
      cut -d "=" -f 2
      4⤵
      PID:3595
  - - /usr/bin/cut
      cut -d ";" -f 1
      4⤵
      PID:3596
  - - /usr/bin/sed
      sed "s/:/ /g"
      4⤵
      Reads runtime system information
      PID:3601
  - - /usr/bin/grep
      grep -l "x-scheme-handler/http;" "/.local/share/applications/*.desktop"
      4⤵
      Reads runtime system information
      PID:3603
  - - /usr/bin/grep
      grep -l "x-scheme-handler/http;" "/usr/local/share//applications/*.desktop"
      4⤵
      Reads runtime system information
      PID:3605
  - - /usr/bin/grep
      grep -l "x-scheme-handler/http;" /usr/share//applications/apport-gtk.desktop /usr/share//applications/bluetooth-sendto.desktop /usr/share//applications/display-im6.q16.desktop /usr/share//applications/gcr-prompter.desktop /usr/share//applications/gcr-viewer.desktop /usr/share//applications/geoclue-demo-agent.desktop /usr/share//applications/gkbd-keyboard-display.desktop /usr/share//applications/gnome-about-panel.desktop /usr/share//applications/gnome-applications-panel.desktop /usr/share//applications/gnome-background-panel.desktop /usr/share//applications/gnome-bluetooth-panel.desktop /usr/share//applications/gnome-color-panel.desktop /usr/share//applications/gnome-datetime-panel.desktop /usr/share//applications/gnome-disk-image-mounter.desktop /usr/share//applications/gnome-disk-image-writer.desktop /usr/share//applications/gnome-display-panel.desktop /usr/share//applications/gnome-initial-setup.desktop /usr/share//applications/gnome-keyboard-panel.desktop /usr/share//applications/gnome-language-selector.desktop /usr/share//applications/gnome-mouse-panel.desktop /usr/share//applications/gnome-multitasking-panel.desktop /usr/share//applications/gnome-network-panel.desktop /usr/share//applications/gnome-notifications-panel.desktop /usr/share//applications/gnome-online-accounts-panel.desktop /usr/share//applications/gnome-power-panel.desktop /usr/share//applications/gnome-printers-panel.desktop /usr/share//applications/gnome-privacy-panel.desktop /usr/share//applications/gnome-region-panel.desktop /usr/share//applications/gnome-search-panel.desktop /usr/share//applications/gnome-session-properties.desktop /usr/share//applications/gnome-sharing-panel.desktop /usr/share//applications/gnome-sound-panel.desktop /usr/share//applications/gnome-system-monitor-kde.desktop /usr/share//applications/gnome-system-panel.desktop /usr/share//applications/gnome-ubuntu-panel.desktop /usr/share//applications/gnome-universal-access-panel.desktop /usr/share//applications/gnome-users-panel.desktop /usr/share//applications/gnome-wacom-panel.desktop /usr/share//applications/gnome-wifi-panel.desktop /usr/share//applications/gnome-wwan-panel.desktop /usr/share//applications/hplj1020.desktop /usr/share//applications/ibus-setup-table.desktop /usr/share//applications/im-config.desktop /usr/share//applications/io.snapcraft.SessionAgent.desktop /usr/share//applications/libreoffice-calc.desktop /usr/share//applications/libreoffice-draw.desktop /usr/share//applications/libreoffice-impress.desktop /usr/share//applications/libreoffice-math.desktop /usr/share//applications/libreoffice-startcenter.desktop /usr/share//applications/libreoffice-writer.desktop /usr/share//applications/libreoffice-xsltfilter.desktop /usr/share//applications/nautilus-autorun-software.desktop /usr/share//applications/nm-applet.desktop /usr/share//applications/nm-connection-editor.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Emojier.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Extension.Gtk3.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Wayland.Gtk3.desktop /usr/share//applications/org.freedesktop.IBus.Setup.desktop /usr/share//applications/org.freedesktop.Xwayland.desktop /usr/share//applications/org.gnome.Calculator.desktop /usr/share//applications/org.gnome.Calendar.desktop /usr/share//applications/org.gnome.Characters.desktop /usr/share//applications/org.gnome.DejaDup.desktop /usr/share//applications/org.gnome.DiskUtility.desktop /usr/share//applications/org.gnome.Evince-previewer.desktop /usr/share//applications/org.gnome.Evince.desktop /usr/share//applications/org.gnome.Evolution-alarm-notify.desktop /usr/share//applications/org.gnome.FileRoller.desktop /usr/share//applications/org.gnome.Logs.desktop /usr/share//applications/org.gnome.Nautilus.desktop /usr/share//applications/org.gnome.OnlineAccounts.OAuth2.desktop /usr/share//applications/org.gnome.PowerStats.desktop /usr/share//applications/org.gnome.RemoteDesktop.Handover.desktop /usr/share//applications/org.gnome.Rhythmbox3.desktop /usr/share//applications/org.gnome.Rhythmbox3.device.desktop /usr/share//applications/org.gnome.Settings.desktop /usr/share//applications/org.gnome.Shell.Extensions.desktop /usr/share//applications/org.gnome.Shell.PortalHelper.desktop /usr/share//applications/org.gnome.Shell.desktop /usr/share//applications/org.gnome.Shotwell-Viewer.desktop /usr/share//applications/org.gnome.Shotwell.Auth.desktop /usr/share//applications/org.gnome.Shotwell.desktop /usr/share//applications/org.gnome.Snapshot.desktop /usr/share//applications/org.gnome.SystemMonitor.desktop /usr/share//applications/org.gnome.Tecla.desktop /usr/share//applications/org.gnome.Terminal.Preferences.desktop /usr/share//applications/org.gnome.Terminal.desktop /usr/share//applications/org.gnome.TextEditor.desktop /usr/share//applications/org.gnome.Totem.desktop /usr/share//applications/org.gnome.Zenity.desktop /usr/share//applications/org.gnome.baobab.desktop /usr/share//applications/org.gnome.clocks.desktop /usr/share//applications/org.gnome.eog.desktop /usr/share//applications/org.gnome.evolution-data-server.OAuth2-handler.desktop /usr/share//applications/org.gnome.font-viewer.desktop /usr/share//applications/org.gnome.seahorse.Application.desktop /usr/share//applications/org.remmina.Remmina-file.desktop /usr/share//applications/org.remmina.Remmina.desktop /usr/share//applications/python3.12.desktop /usr/share//applications/remmina-gnome.desktop /usr/share//applications/rygel.desktop /usr/share//applications/simple-scan.desktop /usr/share//applications/snap-handle-link.desktop /usr/share//applications/software-properties-drivers.desktop /usr/share//applications/software-properties-gtk.desktop /usr/share//applications/software-properties-livepatch.desktop /usr/share//applications/thunderbird.desktop /usr/share//applications/transmission-gtk.desktop /usr/share//applications/update-manager.desktop /usr/share//applications/usb-creator-gtk.desktop /usr/share//applications/xdg-desktop-portal-gnome.desktop /usr/share//applications/xdg-desktop-portal-gtk.desktop /usr/share//applications/yelp.desktop
      4⤵
      Reads runtime system information
      PID:3607
- /usr/bin/gsettings
  gsettings get org.gnome.shell favorite-apps
  2⤵
  - Changes its process name
  - Reads runtime system information
  PID:3608
- - /usr/local/sbin/dbus-launch
    dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
    3⤵
    PID:3612
- - /usr/local/bin/dbus-launch
    dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
    3⤵
    PID:3612
- - /usr/sbin/dbus-launch
    dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
    3⤵
    PID:3612
- - /usr/bin/dbus-launch
    dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
    3⤵
    PID:3612
- /usr/bin/grep
  grep -q "'firefox.desktop'"
  2⤵
  - Reads runtime system information
  PID:3614
- /usr/bin/gsettings
  gsettings get com.canonical.Unity.Launcher favorites
  2⤵
  - Reads runtime system information
  PID:3615
- /usr/bin/grep
  grep -q "'application://firefox.desktop'"
  2⤵
  - Reads runtime system information
  PID:3617
- /usr/bin/gsettings
  gsettings get org.mate.panel object-id-list
  2⤵
  - Reads runtime system information
  PID:3618
- /usr/bin/which
  which qdbus
  2⤵
  PID:3619

/snap/bin/firefox
/snap/bin/firefox -new-tab http://blx.gg
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:3537

/snap/snapd/current/usr/bin/snap
/snap/bin/firefox -new-tab http://blx.gg
1⤵
- Reads AppArmor ptrace settings
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:3537
- /snap/snapd/21759/usr/lib/snapd/snap-seccomp
  /snap/snapd/21759/usr/lib/snapd/snap-seccomp version-info
  2⤵
  - Enumerates kernel/hardware configuration
  PID:3627

/snap/snapd/21759/usr/lib/snapd/snap-confine
/snap/snapd/21759/usr/lib/snapd/snap-confine --base core22 snap.firefox.firefox /usr/lib/snapd/snap-exec firefox -new-tab http://blx.gg
1⤵
PID:3626

Network

DNS

location.services.mozilla.com

Remote address:

8.8.8.8:53

Request

location.services.mozilla.com

IN A

Response

location.services.mozilla.com

IN CNAME

prod.classify-client.prod.webservices.mozgcp.net

prod.classify-client.prod.webservices.mozgcp.net

IN A

35.190.72.216
DNS

firefox-settings-attachments.cdn.mozilla.net

Remote address:

8.8.8.8:53

Request

firefox-settings-attachments.cdn.mozilla.net

IN A

Response

firefox-settings-attachments.cdn.mozilla.net

IN CNAME

attachments.prod.remote-settings.prod.webservices.mozgcp.net

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.117.121.53
DNS

location.services.mozilla.com

Remote address:

8.8.8.8:53

Request

location.services.mozilla.com

IN AAAA

Response

location.services.mozilla.com

IN CNAME

prod.classify-client.prod.webservices.mozgcp.net
DNS

prod.classify-client.prod.webservices.mozgcp.net

Remote address:

8.8.8.8:53

Request

prod.classify-client.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

prod.remote-settings.prod.webservices.mozgcp.net

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

r11.o.lencr.org

Remote address:

8.8.8.8:53

Request

r11.o.lencr.org

IN A

Response

r11.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN A

88.221.134.137

a1887.dscq.akamai.net

IN A

88.221.135.105
DNS

r11.o.lencr.org

Remote address:

8.8.8.8:53

Request

r11.o.lencr.org

IN AAAA

Response

r11.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:5900::1738:ee48

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:5900::1738:ee5a
POST

http://r11.o.lencr.org/

Remote address:

88.221.134.137:80

Request

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E73956077BB50376F1A9ED989D08C4DAC60F18C03F4F604D0A8793617D1E585"
Last-Modified: Fri, 03 Jan 2025 23:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12441
Expires: Sat, 04 Jan 2025 11:47:46 GMT
Date: Sat, 04 Jan 2025 08:20:25 GMT
Connection: keep-alive
POST

http://r11.o.lencr.org/

Remote address:

88.221.134.137:80

Request

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "892562062693893B0CC4EF6CC20D4AA03FAA56585D4A109F11010CC04542D480"
Last-Modified: Wed, 01 Jan 2025 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17702
Expires: Sat, 04 Jan 2025 13:15:28 GMT
Date: Sat, 04 Jan 2025 08:20:26 GMT
Connection: keep-alive
POST

http://r11.o.lencr.org/

Remote address:

88.221.134.137:80

Request

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "184003860067D1130408D05007F780C9F42C34DD550E91D5D372F586099549D6"
Last-Modified: Thu, 02 Jan 2025 23:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6376
Expires: Sat, 04 Jan 2025 10:06:41 GMT
Date: Sat, 04 Jan 2025 08:20:25 GMT
Connection: keep-alive
POST

http://r11.o.lencr.org/

Remote address:

88.221.134.137:80

Request

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "21958CE8276C12275C46F631D36A493A095D5ADBE013BCE333261F01387150D2"
Last-Modified: Thu, 02 Jan 2025 04:09:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2266
Expires: Sat, 04 Jan 2025 08:58:15 GMT
Date: Sat, 04 Jan 2025 08:20:29 GMT
Connection: keep-alive
POST

http://r11.o.lencr.org/

Remote address:

88.221.134.137:80

Request

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E73956077BB50376F1A9ED989D08C4DAC60F18C03F4F604D0A8793617D1E585"
Last-Modified: Fri, 03 Jan 2025 23:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12441
Expires: Sat, 04 Jan 2025 11:47:46 GMT
Date: Sat, 04 Jan 2025 08:20:25 GMT
Connection: keep-alive
DNS

blx.gg

Remote address:

8.8.8.8:53

Request

blx.gg

IN A

Response

blx.gg

IN A

31.220.102.218
DNS

blx.gg

Remote address:

8.8.8.8:53

Request

blx.gg

IN AAAA

Response
GET

http://blx.gg/

Remote address:

31.220.102.218:80

Request

GET / HTTP/1.1
Host: blx.gg
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/png,image/svg+xml,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Priority: u=0, i

Response

HTTP/1.1 301 Moved Permanently

Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 04 Jan 2025 08:20:26 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://blx.gg/
GET

http://detectportal.firefox.com/canonical.html

Remote address:

34.107.221.82:80

Request

GET /canonical.html HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive

Response

HTTP/1.1 200 OK

Server: nginx
Content-Length: 90
Via: 1.1 google
Date: Sat, 04 Jan 2025 00:49:14 GMT
Age: 27071
Content-Type: text/html
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
GET

http://detectportal.firefox.com/canonical.html

Remote address:

34.107.221.82:80

Request

GET /canonical.html HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive

Response

HTTP/1.1 200 OK

Server: nginx
Content-Length: 90
Via: 1.1 google
Date: Sat, 04 Jan 2025 00:49:14 GMT
Age: 27131
Content-Type: text/html
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
DNS

www.mozilla.org

Remote address:

8.8.8.8:53

Request

www.mozilla.org

IN A

Response

www.mozilla.org

IN CNAME

www-mozilla.fastly-edge.com

www-mozilla.fastly-edge.com

IN A

151.101.131.19

www-mozilla.fastly-edge.com

IN A

151.101.195.19

www-mozilla.fastly-edge.com

IN A

151.101.3.19

www-mozilla.fastly-edge.com

IN A

151.101.67.19
DNS

www.mozilla.org

Remote address:

8.8.8.8:53

Request

www.mozilla.org

IN AAAA

Response

www.mozilla.org

IN CNAME

www-mozilla.fastly-edge.com

www-mozilla.fastly-edge.com

IN AAAA

2a04:4e42:400::787

www-mozilla.fastly-edge.com

IN AAAA

2a04:4e42::787

www-mozilla.fastly-edge.com

IN AAAA

2a04:4e42:600::787

www-mozilla.fastly-edge.com

IN AAAA

2a04:4e42:200::787
DNS

example.org

Remote address:

8.8.8.8:53

Request

example.org

IN A

Response

example.org

IN A

93.184.215.14
GET

http://detectportal.firefox.com/success.txt?ipv4

Remote address:

34.107.221.82:80

Request

GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Fri, 03 Jan 2025 10:27:59 GMT
Age: 78747
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
GET

http://detectportal.firefox.com/success.txt?ipv4

Remote address:

34.107.221.82:80

Request

GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Fri, 03 Jan 2025 10:27:59 GMT
Age: 78750
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
GET

http://detectportal.firefox.com/success.txt?ipv4

Remote address:

34.107.221.82:80

Request

GET /success.txt?ipv4 HTTP/1.1
Host: detectportal.firefox.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Length: 8
Via: 1.1 google
Date: Fri, 03 Jan 2025 10:27:59 GMT
Age: 78807
Content-Type: text/plain
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600
DNS

example.org

Remote address:

8.8.8.8:53

Request

example.org

IN AAAA

Response

example.org

IN AAAA

2606:2800:21f:cb07:6820:80da:af6b:8b2c
DNS

ipv4only.arpa

Remote address:

8.8.8.8:53

Request

ipv4only.arpa

IN A

Response

ipv4only.arpa

IN A

192.0.0.171

ipv4only.arpa

IN A

192.0.0.170
DNS

ipv4only.arpa

Remote address:

8.8.8.8:53

Request

ipv4only.arpa

IN AAAA

Response
DNS

ipv4only.arpa

Remote address:

8.8.8.8:53

Request

ipv4only.arpa

IN AAAA

Response
DNS

spocs.getpocket.com

Remote address:

8.8.8.8:53

Request

spocs.getpocket.com

IN A

Response

spocs.getpocket.com

IN CNAME

prod.ads.prod.webservices.mozgcp.net

prod.ads.prod.webservices.mozgcp.net

IN A

34.117.188.166
DNS

spocs.getpocket.com

Remote address:

8.8.8.8:53

Request

spocs.getpocket.com

IN AAAA

Response

spocs.getpocket.com

IN CNAME

prod.ads.prod.webservices.mozgcp.net
DNS

prod.ads.prod.webservices.mozgcp.net

Remote address:

8.8.8.8:53

Request

prod.ads.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

blx.gg

Remote address:

8.8.8.8:53

Request

blx.gg

IN AAAA
DNS

o.pki.goog

Remote address:

8.8.8.8:53

Request

o.pki.goog

IN A

Response

o.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN A

142.250.178.3
DNS

o.pki.goog

Remote address:

8.8.8.8:53

Request

o.pki.goog

IN AAAA

Response

o.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN AAAA

2a00:1450:4009:815::2003
POST

http://o.pki.goog/s/wr3/jLM

Remote address:

142.250.178.3:80

Request

POST /s/wr3/jLM HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sat, 04 Jan 2025 08:20:27 GMT
Cache-Control: public, max-age=14400
Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/sytroprc:52:0
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting
Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/sytroprc:52:0"}],}
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST

http://o.pki.goog/wr2

Remote address:

142.250.178.3:80

Request

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sat, 04 Jan 2025 08:20:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST

http://o.pki.goog/wr2

Remote address:

142.250.178.3:80

Request

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sat, 04 Jan 2025 08:20:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
DNS

shavar.prod.mozaws.net

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN AAAA

Response
DNS

r10.o.lencr.org

Remote address:

8.8.8.8:53

Request

r10.o.lencr.org

IN A

Response

r10.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN A

88.221.135.105

a1887.dscq.akamai.net

IN A

88.221.134.137
DNS

r10.o.lencr.org

Remote address:

8.8.8.8:53

Request

r10.o.lencr.org

IN AAAA

Response

r10.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:5900::1738:ee48

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:5900::1738:ee5a
POST

http://r10.o.lencr.org/

Remote address:

88.221.135.105:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "072E3DE800639C5755992BC13AD38063215DC914A4C6D4E800F9E26F261901BE"
Last-Modified: Thu, 02 Jan 2025 15:51:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10729
Expires: Sat, 04 Jan 2025 11:19:16 GMT
Date: Sat, 04 Jan 2025 08:20:27 GMT
Connection: keep-alive
POST

http://r10.o.lencr.org/

Remote address:

88.221.135.105:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "32E8447D4CB3C90964513A4BA1AB78374D011387C6F1D226EC30275FD17D83F2"
Last-Modified: Fri, 03 Jan 2025 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18336
Expires: Sat, 04 Jan 2025 13:26:04 GMT
Date: Sat, 04 Jan 2025 08:20:28 GMT
Connection: keep-alive
POST

http://r10.o.lencr.org/

Remote address:

88.221.135.105:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4DB25A63689BEF20ADC7BFC40C83E782317F3A5649673A53E8A7484C5815DD9D"
Last-Modified: Fri, 03 Jan 2025 11:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6322
Expires: Sat, 04 Jan 2025 10:05:52 GMT
Date: Sat, 04 Jan 2025 08:20:30 GMT
Connection: keep-alive
DNS

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

Remote address:

8.8.8.8:53

Request

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

IN A

Response

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

IN A

34.36.165.17
DNS

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

Remote address:

8.8.8.8:53

Request

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

IN AAAA

Response

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

IN AAAA

2600:1901:0:8e3f::
POST

http://r10.o.lencr.org/

Remote address:

88.221.135.105:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "072E3DE800639C5755992BC13AD38063215DC914A4C6D4E800F9E26F261901BE"
Last-Modified: Thu, 02 Jan 2025 15:51:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10728
Expires: Sat, 04 Jan 2025 11:19:16 GMT
Date: Sat, 04 Jan 2025 08:20:28 GMT
Connection: keep-alive
POST

http://r10.o.lencr.org/

Remote address:

88.221.135.105:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D5F93B483DFA04E8BE170D16426E55693CB8FA67720C7609945359EF00ACBD57"
Last-Modified: Fri, 03 Jan 2025 01:24:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11818
Expires: Sat, 04 Jan 2025 11:37:26 GMT
Date: Sat, 04 Jan 2025 08:20:28 GMT
Connection: keep-alive
POST

http://r10.o.lencr.org/

Remote address:

88.221.135.105:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "32E8447D4CB3C90964513A4BA1AB78374D011387C6F1D226EC30275FD17D83F2"
Last-Modified: Fri, 03 Jan 2025 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18336
Expires: Sat, 04 Jan 2025 13:26:04 GMT
Date: Sat, 04 Jan 2025 08:20:28 GMT
Connection: keep-alive
POST

http://r10.o.lencr.org/

Remote address:

88.221.135.105:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "456D9C5DAD02B0D48730B1ADC98BAF7EEA4E60284C816B289F988555BAF93E5D"
Last-Modified: Fri, 03 Jan 2025 07:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6312
Expires: Sat, 04 Jan 2025 10:05:42 GMT
Date: Sat, 04 Jan 2025 08:20:30 GMT
Connection: keep-alive
POST

http://r10.o.lencr.org/

Remote address:

88.221.134.137:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EE831E42CF34714D5076C071FD1EC400B51E2DDB502067E21B2882C531D47523"
Last-Modified: Thu, 02 Jan 2025 20:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6283
Expires: Sat, 04 Jan 2025 10:05:12 GMT
Date: Sat, 04 Jan 2025 08:20:29 GMT
Connection: keep-alive
POST

http://r10.o.lencr.org/

Remote address:

88.221.134.137:80

Request

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FB98BB7B5604AC1E0C300B268B5D09021A5FC7F0C7053662657D5CA050522667"
Last-Modified: Thu, 02 Jan 2025 04:35:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14557
Expires: Sat, 04 Jan 2025 12:23:12 GMT
Date: Sat, 04 Jan 2025 08:20:35 GMT
Connection: keep-alive
DNS

telemetry-incoming.r53-2.services.mozilla.com

Remote address:

8.8.8.8:53

Request

telemetry-incoming.r53-2.services.mozilla.com

IN AAAA

Response
DNS

normandy.cdn.mozilla.net

Remote address:

8.8.8.8:53

Request

normandy.cdn.mozilla.net

IN A

Response

normandy.cdn.mozilla.net

IN CNAME

normandy-cdn.services.mozilla.com

normandy-cdn.services.mozilla.com

IN A

35.201.103.21
DNS

normandy.cdn.mozilla.net

Remote address:

8.8.8.8:53

Request

normandy.cdn.mozilla.net

IN AAAA

Response

normandy.cdn.mozilla.net

IN CNAME

normandy-cdn.services.mozilla.com
DNS

www.youtube.com

Remote address:

8.8.8.8:53

Request

www.youtube.com

IN A

Response

www.youtube.com

IN CNAME

youtube-ui.l.google.com

youtube-ui.l.google.com

IN A

142.250.200.46

youtube-ui.l.google.com

IN A

216.58.212.238

youtube-ui.l.google.com

IN A

172.217.169.78

youtube-ui.l.google.com

IN A

172.217.16.238

youtube-ui.l.google.com

IN A

172.217.169.46

youtube-ui.l.google.com

IN A

216.58.204.78

youtube-ui.l.google.com

IN A

142.250.179.238

youtube-ui.l.google.com

IN A

216.58.201.110

youtube-ui.l.google.com

IN A

142.250.180.14

youtube-ui.l.google.com

IN A

216.58.212.206

youtube-ui.l.google.com

IN A

142.250.178.14

youtube-ui.l.google.com

IN A

142.250.187.238

youtube-ui.l.google.com

IN A

142.250.200.14

youtube-ui.l.google.com

IN A

142.250.187.206

youtube-ui.l.google.com

IN A

172.217.169.14
DNS

www.youtube.com

Remote address:

8.8.8.8:53

Request

www.youtube.com

IN AAAA

Response

www.youtube.com

IN CNAME

youtube-ui.l.google.com

youtube-ui.l.google.com

IN AAAA

2a00:1450:4009:817::200e

youtube-ui.l.google.com

IN AAAA

2a00:1450:4009:80b::200e

youtube-ui.l.google.com

IN AAAA

2a00:1450:4009:80a::200e

youtube-ui.l.google.com

IN AAAA

2a00:1450:4009:818::200e
DNS

www.facebook.com

Remote address:

8.8.8.8:53

Request

www.facebook.com

IN A

Response

www.facebook.com

IN CNAME

star-mini.c10r.facebook.com

star-mini.c10r.facebook.com

IN A

157.240.214.35
DNS

www.facebook.com

Remote address:

8.8.8.8:53

Request

www.facebook.com

IN AAAA

Response

www.facebook.com

IN CNAME

star-mini.c10r.facebook.com

star-mini.c10r.facebook.com

IN AAAA

2a03:2880:f170:81:face:b00c:0:25de
DNS

www.wikipedia.org

Remote address:

8.8.8.8:53

Request

www.wikipedia.org

IN A

Response

www.wikipedia.org

IN CNAME

dyna.wikimedia.org

dyna.wikimedia.org

IN A

185.15.59.224
DNS

www.wikipedia.org

Remote address:

8.8.8.8:53

Request

www.wikipedia.org

IN AAAA
DNS

www.olx.pl

Remote address:

8.8.8.8:53

Request

www.olx.pl

IN A
DNS

www.olx.pl

Remote address:

8.8.8.8:53

Request

www.olx.pl

IN AAAA
DNS

www.wykop.pl

Remote address:

8.8.8.8:53

Request

www.wykop.pl

IN A
DNS

www.wykop.pl

Remote address:

8.8.8.8:53

Request

www.wykop.pl

IN AAAA
DNS

www.amazon.pl

Remote address:

8.8.8.8:53

Request

www.amazon.pl

IN A
DNS

www.amazon.pl

Remote address:

8.8.8.8:53

Request

www.amazon.pl

IN AAAA
DNS

allegro.pl

Remote address:

8.8.8.8:53

Request

allegro.pl

IN A
DNS

allegro.pl

Remote address:

8.8.8.8:53

Request

allegro.pl

IN AAAA
DNS

temuaffiliateprogram.pxf.io

Remote address:

8.8.8.8:53

Request

temuaffiliateprogram.pxf.io

IN A
DNS

temuaffiliateprogram.pxf.io

Remote address:

8.8.8.8:53

Request

temuaffiliateprogram.pxf.io

IN AAAA
DNS

normandy-cdn.services.mozilla.com

Remote address:

8.8.8.8:53

Request

normandy-cdn.services.mozilla.com

IN AAAA

Response
DNS

ipv4only.arpa

Remote address:

8.8.8.8:53

Request

ipv4only.arpa

IN AAAA
DNS

tracking-protection.cdn.mozilla.net

Remote address:

8.8.8.8:53

Request

tracking-protection.cdn.mozilla.net

IN A

Response

tracking-protection.cdn.mozilla.net

IN CNAME

tracking-protection.prod.mozaws.net

tracking-protection.prod.mozaws.net

IN A

34.120.158.37
DNS

tracking-protection.cdn.mozilla.net

Remote address:

8.8.8.8:53

Request

tracking-protection.cdn.mozilla.net

IN AAAA

Response

tracking-protection.cdn.mozilla.net

IN CNAME

tracking-protection.prod.mozaws.net
DNS

tracking-protection.prod.mozaws.net

Remote address:

8.8.8.8:53

Request

tracking-protection.prod.mozaws.net

IN AAAA
DNS

firefox-settings-attachments.cdn.mozilla.net

Remote address:

8.8.8.8:53

Request

firefox-settings-attachments.cdn.mozilla.net

IN AAAA

Response

firefox-settings-attachments.cdn.mozilla.net

IN CNAME

attachments.prod.remote-settings.prod.webservices.mozgcp.net
DNS

attachments.prod.remote-settings.prod.webservices.mozgcp.net

Remote address:

8.8.8.8:53

Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

classify-client.services.mozilla.com

Remote address:

8.8.8.8:53

Request

classify-client.services.mozilla.com

IN A

Response

classify-client.services.mozilla.com

IN CNAME

prod.classify-client.prod.webservices.mozgcp.net

prod.classify-client.prod.webservices.mozgcp.net

IN A

35.190.72.216
DNS

classify-client.services.mozilla.com

Remote address:

8.8.8.8:53

Request

classify-client.services.mozilla.com

IN AAAA

Response

classify-client.services.mozilla.com

IN CNAME

prod.classify-client.prod.webservices.mozgcp.net
DNS

prod.classify-client.prod.webservices.mozgcp.net

Remote address:

8.8.8.8:53

Request

prod.classify-client.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

blx.gg

Remote address:

1.1.1.1:53

Request

blx.gg

IN AAAA

Response
DNS

e6.o.lencr.org

Remote address:

1.1.1.1:53

Request

e6.o.lencr.org

IN A

Response

e6.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN A

2.22.144.149

a1887.dscq.akamai.net

IN A

2.22.144.142
DNS

e6.o.lencr.org

Remote address:

1.1.1.1:53

Request

e6.o.lencr.org

IN AAAA

Response

e6.o.lencr.org

IN CNAME

o.lencr.edgesuite.net

o.lencr.edgesuite.net

IN CNAME

a1887.dscq.akamai.net

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:5900::1738:ee48

a1887.dscq.akamai.net

IN AAAA

2a02:26f0:5900::1738:ee5a
POST

http://e6.o.lencr.org/

Remote address:

2.22.144.149:80

Request

POST / HTTP/1.1
Host: e6.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "C294F8DF59D1A60EAAEED297ED878C8614FC46A288B3A2DD81834886728AE8AC"
Last-Modified: Fri, 03 Jan 2025 07:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21543
Expires: Sat, 04 Jan 2025 14:19:35 GMT
Date: Sat, 04 Jan 2025 08:20:32 GMT
Connection: keep-alive
DNS

www.google.com

Remote address:

1.1.1.1:53

Request

www.google.com

IN A

Response

www.google.com

IN A

142.250.187.196
DNS

www.google.com

Remote address:

1.1.1.1:53

Request

www.google.com

IN AAAA

Response

www.google.com

IN AAAA

2a00:1450:4009:81d::2004
POST

http://o.pki.goog/wr2

Remote address:

142.250.178.3:80

Request

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sat, 04 Jan 2025 08:20:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
POST

http://o.pki.goog/wr2

Remote address:

142.250.178.3:80

Request

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sat, 04 Jan 2025 08:20:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
DNS

www.wikipedia.org

Remote address:

1.1.1.1:53

Request

www.wikipedia.org

IN A

Response

www.wikipedia.org

IN CNAME

dyna.wikimedia.org

dyna.wikimedia.org

IN A

185.15.59.224
DNS

temuaffiliateprogram.pxf.io

Remote address:

1.1.1.1:53

Request

temuaffiliateprogram.pxf.io

IN AAAA

Response
DNS

temuaffiliateprogram.pxf.io

Remote address:

1.1.1.1:53

Request

temuaffiliateprogram.pxf.io

IN A

Response

temuaffiliateprogram.pxf.io

IN A

35.201.76.231
DNS

allegro.pl

Remote address:

1.1.1.1:53

Request

allegro.pl

IN AAAA

Response
DNS

allegro.pl

Remote address:

1.1.1.1:53

Request

allegro.pl

IN A

Response

allegro.pl

IN A

185.31.27.160
DNS

www.amazon.pl

Remote address:

1.1.1.1:53

Request

www.amazon.pl

IN AAAA

Response

www.amazon.pl

IN CNAME

tp.6624f9d37-frontier.amazon.pl

tp.6624f9d37-frontier.amazon.pl

IN CNAME

d2wgvyj7yth7tn.cloudfront.net

d2wgvyj7yth7tn.cloudfront.net

IN AAAA

2600:9000:2682:5e00:11:4cdd:b6c0:93a1

d2wgvyj7yth7tn.cloudfront.net

IN AAAA

2600:9000:2682:5200:11:4cdd:b6c0:93a1

d2wgvyj7yth7tn.cloudfront.net

IN AAAA

2600:9000:2682:1a00:11:4cdd:b6c0:93a1

d2wgvyj7yth7tn.cloudfront.net

IN AAAA

2600:9000:2682:fc00:11:4cdd:b6c0:93a1

d2wgvyj7yth7tn.cloudfront.net

IN AAAA

2600:9000:2682:a200:11:4cdd:b6c0:93a1

d2wgvyj7yth7tn.cloudfront.net

IN AAAA

2600:9000:2682:5800:11:4cdd:b6c0:93a1

d2wgvyj7yth7tn.cloudfront.net

IN AAAA

2600:9000:2682:2200:11:4cdd:b6c0:93a1

d2wgvyj7yth7tn.cloudfront.net

IN AAAA

2600:9000:2682:d400:11:4cdd:b6c0:93a1
DNS

www.amazon.pl

Remote address:

1.1.1.1:53

Request

www.amazon.pl

IN A

Response

www.amazon.pl

IN CNAME

tp.6624f9d37-frontier.amazon.pl

tp.6624f9d37-frontier.amazon.pl

IN CNAME

d2wgvyj7yth7tn.cloudfront.net

d2wgvyj7yth7tn.cloudfront.net

IN A

18.245.253.12

d2wgvyj7yth7tn.cloudfront.net

IN A

18.245.253.2

d2wgvyj7yth7tn.cloudfront.net

IN A

18.245.253.118

d2wgvyj7yth7tn.cloudfront.net

IN A

18.245.253.104
DNS

www.wykop.pl

Remote address:

1.1.1.1:53

Request

www.wykop.pl

IN AAAA

Response
DNS

www.wykop.pl

Remote address:

1.1.1.1:53

Request

www.wykop.pl

IN A

Response

www.wykop.pl

IN CNAME

wykop.pl

wykop.pl

IN A

146.59.55.142

wykop.pl

IN A

146.59.88.0

wykop.pl

IN A

146.59.79.191
DNS

www.olx.pl

Remote address:

1.1.1.1:53

Request

www.olx.pl

IN AAAA

Response

www.olx.pl

IN CNAME

d3rlbd2j6pzlef.cloudfront.net
DNS

www.olx.pl

Remote address:

1.1.1.1:53

Request

www.olx.pl

IN A

Response

www.olx.pl

IN CNAME

d3rlbd2j6pzlef.cloudfront.net

d3rlbd2j6pzlef.cloudfront.net

IN A

18.244.124.77

d3rlbd2j6pzlef.cloudfront.net

IN A

18.244.124.17

d3rlbd2j6pzlef.cloudfront.net

IN A

18.244.124.40

d3rlbd2j6pzlef.cloudfront.net

IN A

18.244.124.3
DNS

www.wikipedia.org

Remote address:

1.1.1.1:53

Request

www.wikipedia.org

IN AAAA

Response

www.wikipedia.org

IN CNAME

dyna.wikimedia.org

dyna.wikimedia.org

IN AAAA

2a02:ec80:300:ed1a::1
DNS

d3rlbd2j6pzlef.cloudfront.net

Remote address:

1.1.1.1:53

Request

d3rlbd2j6pzlef.cloudfront.net

IN AAAA

Response
DNS

ipv4only.arpa

Remote address:

1.1.1.1:53

Request

ipv4only.arpa

IN A

Response

ipv4only.arpa

IN A

192.0.0.170

ipv4only.arpa

IN A

192.0.0.171
DNS

ipv4only.arpa

Remote address:

1.1.1.1:53

Request

ipv4only.arpa

IN AAAA

Response
DNS

ipv4only.arpa

Remote address:

1.1.1.1:53

Request

ipv4only.arpa

IN AAAA

Response
DNS

tracking-protection.cdn.mozilla.net

Remote address:

1.1.1.1:53

Request

tracking-protection.cdn.mozilla.net

IN A

Response

tracking-protection.cdn.mozilla.net

IN CNAME

tracking-protection.prod.mozaws.net

tracking-protection.prod.mozaws.net

IN A

34.120.158.37
DNS

tracking-protection.prod.mozaws.net

Remote address:

1.1.1.1:53

Request

tracking-protection.prod.mozaws.net

IN AAAA

Response
DNS

prod.balrog.prod.cloudops.mozgcp.net

Remote address:

1.1.1.1:53

Request

prod.balrog.prod.cloudops.mozgcp.net

IN AAAA

Response
DNS

ciscobinary.openh264.org

Remote address:

1.1.1.1:53

Request

ciscobinary.openh264.org

IN A

Response

ciscobinary.openh264.org

IN CNAME

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

IN CNAME

a17.rackcdn.com

a17.rackcdn.com

IN CNAME

a17.rackcdn.com.mdc.edgesuite.net

a17.rackcdn.com.mdc.edgesuite.net

IN CNAME

a19.dscg10.akamai.net

a19.dscg10.akamai.net

IN A

88.221.134.155

a19.dscg10.akamai.net

IN A

88.221.134.209
DNS

ciscobinary.openh264.org

Remote address:

1.1.1.1:53

Request

ciscobinary.openh264.org

IN AAAA

Response

ciscobinary.openh264.org

IN CNAME

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

IN CNAME

a17.rackcdn.com

a17.rackcdn.com

IN CNAME

a17.rackcdn.com.mdc.edgesuite.net

a17.rackcdn.com.mdc.edgesuite.net

IN CNAME

a19.dscg10.akamai.net

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:869b

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:86d1
GET

http://ciscobinary.openh264.org/openh264-linux64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip

Remote address:

88.221.134.155:80

Request

GET /openh264-linux64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

Response

HTTP/1.1 200 OK

Last-Modified: Fri, 08 Nov 2024 02:37:50 GMT
ETag: 30082ae40dc48af6343db2fd22cfc645
Content-Length: 583674
Accept-Ranges: bytes
X-Timestamp: 1731033469.27601
Content-Type: application/zip
X-Trans-Id: tx14fd20916e724b609cb8d-00672f758adfw1
Cache-Control: public, max-age=188369
Expires: Mon, 06 Jan 2025 12:40:17 GMT
Date: Sat, 04 Jan 2025 08:20:48 GMT
Connection: keep-alive
DNS

services.addons.mozilla.org

Remote address:

1.1.1.1:53

Request

services.addons.mozilla.org

IN A

Response

services.addons.mozilla.org

IN A

151.101.129.91

services.addons.mozilla.org

IN A

151.101.1.91

services.addons.mozilla.org

IN A

151.101.193.91

services.addons.mozilla.org

IN A

151.101.65.91
DNS

services.addons.mozilla.org

Remote address:

1.1.1.1:53

Request

services.addons.mozilla.org

IN AAAA

Response

services.addons.mozilla.org

IN AAAA

2a04:4e42:400::347

services.addons.mozilla.org

IN AAAA

2a04:4e42:600::347

services.addons.mozilla.org

IN AAAA

2a04:4e42:200::347

services.addons.mozilla.org

IN AAAA

2a04:4e42::347
DNS

versioncheck-bg.addons.mozilla.org

Remote address:

1.1.1.1:53

Request

versioncheck-bg.addons.mozilla.org

IN A

Response

versioncheck-bg.addons.mozilla.org

IN A

34.160.90.233
DNS

versioncheck-bg.addons.mozilla.org

Remote address:

1.1.1.1:53

Request

versioncheck-bg.addons.mozilla.org

IN AAAA

Response
DNS

safebrowsing.googleapis.com

Remote address:

1.1.1.1:53

Request

safebrowsing.googleapis.com

IN A

Response

safebrowsing.googleapis.com

IN A

142.250.180.10
DNS

safebrowsing.googleapis.com

Remote address:

1.1.1.1:53

Request

safebrowsing.googleapis.com

IN AAAA

Response

safebrowsing.googleapis.com

IN AAAA

2a00:1450:4009:81d::200a
DNS

o.pki.goog

Remote address:

1.1.1.1:53

Request

o.pki.goog

IN A
DNS

o.pki.goog

Remote address:

1.1.1.1:53

Request

o.pki.goog

IN AAAA

Response

o.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN AAAA

2a00:1450:4009:821::2003
DNS

o.pki.goog

Remote address:

8.8.8.8:53

Request

o.pki.goog

IN A

Response

o.pki.goog

IN CNAME

pki-goog.l.google.com

pki-goog.l.google.com

IN A

142.250.178.3
DNS

pki-goog.l.google.com

Remote address:

8.8.8.8:53

Request

pki-goog.l.google.com

IN AAAA
DNS

ipv4only.arpa

Remote address:

8.8.8.8:53

Request

ipv4only.arpa

IN A

Response

ipv4only.arpa

IN A

192.0.0.171

ipv4only.arpa

IN A

192.0.0.170
DNS

pki-goog.l.google.com

Remote address:

1.1.1.1:53

Request

pki-goog.l.google.com

IN AAAA

Response

pki-goog.l.google.com

IN AAAA

2a00:1450:4009:827::2003
DNS

ipv4only.arpa

Remote address:

1.1.1.1:53

Request

ipv4only.arpa

IN AAAA

Response
POST

http://o.pki.goog/wr2

Remote address:

142.250.178.3:80

Request

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Content-Type: application/ocsp-response
Date: Sat, 04 Jan 2025 08:21:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
DNS

ipv4only.arpa

Remote address:

1.1.1.1:53

Request

ipv4only.arpa

IN AAAA
DNS

firefox-settings-attachments.cdn.mozilla.net

Remote address:

1.1.1.1:53

Request

firefox-settings-attachments.cdn.mozilla.net

IN A
DNS

firefox-settings-attachments.cdn.mozilla.net

Remote address:

1.1.1.1:53

Request

firefox-settings-attachments.cdn.mozilla.net

IN AAAA
DNS

prod.detectportal.prod.cloudops.mozgcp.net

Remote address:

8.8.8.8:53

Request

prod.detectportal.prod.cloudops.mozgcp.net

IN AAAA

Response

prod.detectportal.prod.cloudops.mozgcp.net

IN AAAA

2600:1901:0:38d7::
DNS

ipv4only.arpa

Remote address:

8.8.8.8:53

Request

ipv4only.arpa

IN A

Response

ipv4only.arpa

IN A

192.0.0.171

ipv4only.arpa

IN A

192.0.0.170
DNS

ipv4only.arpa

Remote address:

8.8.8.8:53

Request

ipv4only.arpa

IN AAAA

Response
DNS

ipv4only.arpa

Remote address:

8.8.8.8:53

Request

ipv4only.arpa

IN AAAA

Response
DNS

firefox-settings-attachments.cdn.mozilla.net

Remote address:

8.8.8.8:53

Request

firefox-settings-attachments.cdn.mozilla.net

IN AAAA

Response

firefox-settings-attachments.cdn.mozilla.net

IN CNAME

attachments.prod.remote-settings.prod.webservices.mozgcp.net
DNS

firefox-settings-attachments.cdn.mozilla.net

Remote address:

8.8.8.8:53

Request

firefox-settings-attachments.cdn.mozilla.net

IN A

Response

firefox-settings-attachments.cdn.mozilla.net

IN CNAME

attachments.prod.remote-settings.prod.webservices.mozgcp.net

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.117.121.53
DNS

attachments.prod.remote-settings.prod.webservices.mozgcp.net

Remote address:

8.8.8.8:53

Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

api.snapcraft.io

Remote address:

8.8.8.8:53

Request

api.snapcraft.io

IN A

Response

api.snapcraft.io

IN A

185.125.188.58

api.snapcraft.io

IN A

185.125.188.54

api.snapcraft.io

IN A

185.125.188.59

api.snapcraft.io

IN A

185.125.188.55
DNS

api.snapcraft.io

Remote address:

8.8.8.8:53

Request

api.snapcraft.io

IN AAAA

Response

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::42

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::117

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::6d

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::2e6
DNS

canonical-lgw01.cdn.snapcraftcontent.com

Remote address:

8.8.8.8:53

Request

canonical-lgw01.cdn.snapcraftcontent.com

IN A

Response

canonical-lgw01.cdn.snapcraftcontent.com

IN A

185.125.190.27

canonical-lgw01.cdn.snapcraftcontent.com

IN A

185.125.190.26

canonical-lgw01.cdn.snapcraftcontent.com

IN A

185.125.190.28
DNS

canonical-lgw01.cdn.snapcraftcontent.com

Remote address:

8.8.8.8:53

Request

canonical-lgw01.cdn.snapcraftcontent.com

IN AAAA

Response
DNS

api.snapcraft.io

Remote address:

8.8.8.8:53

Request

api.snapcraft.io

IN A

Response

api.snapcraft.io

IN A

185.125.188.55

api.snapcraft.io

IN A

185.125.188.59

api.snapcraft.io

IN A

185.125.188.58

api.snapcraft.io

IN A

185.125.188.54
DNS

canonical-bos01.cdn.snapcraftcontent.com

Remote address:

8.8.8.8:53

Request

canonical-bos01.cdn.snapcraftcontent.com

IN A

Response

canonical-bos01.cdn.snapcraftcontent.com

IN A

91.189.91.99

canonical-bos01.cdn.snapcraftcontent.com

IN A

91.189.91.43

canonical-bos01.cdn.snapcraftcontent.com

IN A

91.189.91.100

canonical-bos01.cdn.snapcraftcontent.com

IN A

91.189.91.42

canonical-bos01.cdn.snapcraftcontent.com

IN A

91.189.91.101
DNS

canonical-bos01.cdn.snapcraftcontent.com

Remote address:

8.8.8.8:53

Request

canonical-bos01.cdn.snapcraftcontent.com

IN AAAA

Response

canonical-bos01.cdn.snapcraftcontent.com

IN AAAA

2620:2d:4002:1::32

canonical-bos01.cdn.snapcraftcontent.com

IN AAAA

2620:2d:4002:1::33

canonical-bos01.cdn.snapcraftcontent.com

IN AAAA

2620:2d:4002:1::34

canonical-bos01.cdn.snapcraftcontent.com

IN AAAA

2001:67c:1562::1e

canonical-bos01.cdn.snapcraftcontent.com

IN AAAA

2001:67c:1562::1d
DNS

api.snapcraft.io

Remote address:

8.8.8.8:53

Request

api.snapcraft.io

IN A

Response

api.snapcraft.io

IN A

185.125.188.59

api.snapcraft.io

IN A

185.125.188.55

api.snapcraft.io

IN A

185.125.188.54

api.snapcraft.io

IN A

185.125.188.58
DNS

api.snapcraft.io

Remote address:

8.8.8.8:53

Request

api.snapcraft.io

IN A

Response

api.snapcraft.io

IN A

185.125.188.59

api.snapcraft.io

IN A

185.125.188.54

api.snapcraft.io

IN A

185.125.188.55

api.snapcraft.io

IN A

185.125.188.58
DNS

api.snapcraft.io

Remote address:

8.8.8.8:53

Request

api.snapcraft.io

IN AAAA

Response

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::42

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::6d

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::2e6

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::117
DNS

api.snapcraft.io

Remote address:

8.8.8.8:53

Request

api.snapcraft.io

IN AAAA

Response

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::117

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::42

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::6d

api.snapcraft.io

IN AAAA

2620:2d:4000:1010::2e6
DNS

_http._tcp.archive.ubuntu.com

Remote address:

8.8.8.8:53

Request

_http._tcp.archive.ubuntu.com

IN SRV

Response
DNS

archive.ubuntu.com

Remote address:

8.8.8.8:53

Request

archive.ubuntu.com

IN A

Response

archive.ubuntu.com

IN A

185.125.190.81

archive.ubuntu.com

IN A

91.189.91.81

archive.ubuntu.com

IN A

185.125.190.82

archive.ubuntu.com

IN A

185.125.190.83

archive.ubuntu.com

IN A

91.189.91.82

archive.ubuntu.com

IN A

91.189.91.83
DNS

archive.ubuntu.com

Remote address:

8.8.8.8:53

Request

archive.ubuntu.com

IN AAAA

Response

archive.ubuntu.com

IN AAAA

2620:2d:4002:1::103

archive.ubuntu.com

IN AAAA

2620:2d:4002:1::101

archive.ubuntu.com

IN AAAA

2620:2d:4000:1::102

archive.ubuntu.com

IN AAAA

2620:2d:4000:1::103

archive.ubuntu.com

IN AAAA

2620:2d:4002:1::102

archive.ubuntu.com

IN AAAA

2620:2d:4000:1::101
GET

http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/o/openssl/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:54 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 280
Content-Type: text/html; charset=iso-8859-1
GET

http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/o/openssl/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:54 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 280
Content-Type: text/html; charset=iso-8859-1
GET

http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-sftp-server_9.6p1-3ubuntu13.4_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/o/openssh/openssh-sftp-server_9.6p1-3ubuntu13.4_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:29:54 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 09 Jul 2024 14:23:11 GMT
ETag: "91e8-61cd145006d1e"
Accept-Ranges: bytes
Content-Length: 37352
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package
GET

http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_9.6p1-3ubuntu13.4_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/o/openssh/openssh-server_9.6p1-3ubuntu13.4_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_9.6p1-3ubuntu13.4_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/o/openssh/openssh-client_9.6p1-3ubuntu13.4_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://archive.ubuntu.com/ubuntu/pool/main/n/netplan.io/python3-netplan_1.0-2ubuntu1.2_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/n/netplan.io/python3-netplan_1.0-2ubuntu1.2_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://archive.ubuntu.com/ubuntu/pool/main/n/netplan.io/netplan-generator_1.0-2ubuntu1.2_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/n/netplan.io/netplan-generator_1.0-2ubuntu1.2_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://archive.ubuntu.com/ubuntu/pool/main/n/netplan.io/netplan.io_1.0-2ubuntu1.2_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/n/netplan.io/netplan.io_1.0-2ubuntu1.2_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://archive.ubuntu.com/ubuntu/pool/main/n/netplan.io/libnetplan1_1.0-2ubuntu1.2_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/n/netplan.io/libnetplan1_1.0-2ubuntu1.2_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_3.0.13-0ubuntu3.1_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/o/openssl/openssl_3.0.13-0ubuntu3.1_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://archive.ubuntu.com/ubuntu/pool/main/w/wget/wget_1.21.4-1ubuntu4.1_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/w/wget/wget_1.21.4-1ubuntu4.1_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://archive.ubuntu.com/ubuntu/pool/main/g/ghostscript/ghostscript_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/g/ghostscript/ghostscript_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
DNS

_http._tcp.security.ubuntu.com

Remote address:

8.8.8.8:53

Request

_http._tcp.security.ubuntu.com

IN SRV

Response
DNS

security.ubuntu.com

Remote address:

8.8.8.8:53

Request

security.ubuntu.com

IN A

Response

security.ubuntu.com

IN A

185.125.190.83

security.ubuntu.com

IN A

185.125.190.81

security.ubuntu.com

IN A

91.189.91.81

security.ubuntu.com

IN A

91.189.91.83

security.ubuntu.com

IN A

185.125.190.82

security.ubuntu.com

IN A

91.189.91.82
DNS

security.ubuntu.com

Remote address:

8.8.8.8:53

Request

security.ubuntu.com

IN AAAA

Response

security.ubuntu.com

IN AAAA

2620:2d:4002:1::103

security.ubuntu.com

IN AAAA

2620:2d:4000:1::101

security.ubuntu.com

IN AAAA

2620:2d:4002:1::102

security.ubuntu.com

IN AAAA

2620:2d:4000:1::103

security.ubuntu.com

IN AAAA

2620:2d:4000:1::102

security.ubuntu.com

IN AAAA

2620:2d:4002:1::101
GET

http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/o/openssl/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/o/openssl/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_3.0.13-0ubuntu3.1_amd64.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/o/openssl/openssl_3.0.13-0ubuntu3.1_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/g/ghostscript/ghostscript_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/g/ghostscript/ghostscript_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/g/ghostscript/libgs10_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/g/ghostscript/libgs10_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/g/ghostscript/libgs10-common_10.02.1%7edfsg1-0ubuntu7.3_all.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/g/ghostscript/libgs10-common_10.02.1%7edfsg1-0ubuntu7.3_all.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/g/ghostscript/libgs-common_10.02.1%7edfsg1-0ubuntu7.3_all.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/g/ghostscript/libgs-common_10.02.1%7edfsg1-0ubuntu7.3_all.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff6_4.5.1%2bgit230720-4ubuntu2.1_amd64.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/t/tiff/libtiff6_4.5.1%2bgit230720-4ubuntu2.1_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:29:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/i/intel-microcode/intel-microcode_3.20240514.0ubuntu0.24.04.1_amd64.deb

Remote address:

185.125.190.83:80

Request

GET /ubuntu/pool/main/i/intel-microcode/intel-microcode_3.20240514.0ubuntu0.24.04.1_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive
GET

http://security.ubuntu.com/ubuntu/pool/main/i/intel-microcode/intel-microcode_3.20240514.0ubuntu0.24.04.1_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/i/intel-microcode/intel-microcode_3.20240514.0ubuntu0.24.04.1_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:30:38 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/l/linux-meta/linux-generic_6.8.0-39.39_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/l/linux-meta/linux-generic_6.8.0-39.39_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:30:38 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/l/linux-meta/linux-image-generic_6.8.0-39.39_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/l/linux-meta/linux-image-generic_6.8.0-39.39_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:30:38 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/l/linux-meta/linux-headers-generic_6.8.0-39.39_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/l/linux-meta/linux-headers-generic_6.8.0-39.39_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:30:42 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-libc-dev_6.8.0-39.39_amd64.deb

Remote address:

185.125.190.81:80

Request

GET /ubuntu/pool/main/l/linux/linux-libc-dev_6.8.0-39.39_amd64.deb HTTP/1.1
Host: security.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:30:43 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 281
Content-Type: text/html; charset=iso-8859-1
GET

http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-headers-6.8.0-39_6.8.0-39.39_all.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/l/linux/linux-headers-6.8.0-39_6.8.0-39.39_all.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:30:38 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Wed, 24 Jul 2024 21:45:58 GMT
ETag: "d06baa-61e05341f3704"
Accept-Ranges: bytes
Content-Length: 13659050
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package
GET

http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-headers-6.8.0-39-generic_6.8.0-39.39_amd64.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/l/linux/linux-headers-6.8.0-39-generic_6.8.0-39.39_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:30:41 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Wed, 24 Jul 2024 21:46:01 GMT
ETag: "3b5b90-61e05344f4016"
Accept-Ranges: bytes
Content-Length: 3890064
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package
GET

http://archive.ubuntu.com/ubuntu/pool/main/l/linux-meta/linux-headers-generic_6.8.0-39.39_amd64.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/l/linux-meta/linux-headers-generic_6.8.0-39.39_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:30:42 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 280
Content-Type: text/html; charset=iso-8859-1
GET

http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-libc-dev_6.8.0-39.39_amd64.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/l/linux/linux-libc-dev_6.8.0-39.39_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 404 Not Found

Date: Sat, 04 Jan 2025 08:30:42 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 280
Content-Type: text/html; charset=iso-8859-1
GET

http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-tools-common_6.8.0-39.39_all.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/l/linux/linux-tools-common_6.8.0-39.39_all.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:30:43 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Wed, 24 Jul 2024 21:46:09 GMT
ETag: "76f20-61e0534cc409a"
Accept-Ranges: bytes
Content-Length: 487200
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package
GET

http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-tools-6.8.0-39_6.8.0-39.39_amd64.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/l/linux/linux-tools-6.8.0-39_6.8.0-39.39_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:30:43 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Wed, 24 Jul 2024 21:46:02 GMT
ETag: "4b73a8-61e053463f10c"
Accept-Ranges: bytes
Content-Length: 4944808
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package
GET

http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-tools-6.8.0-39-generic_6.8.0-39.39_amd64.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/l/linux/linux-tools-6.8.0-39-generic_6.8.0-39.39_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:30:45 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Wed, 24 Jul 2024 21:46:03 GMT
ETag: "704-61e0534681791"
Accept-Ranges: bytes
Content-Length: 1796
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package
GET

http://archive.ubuntu.com/ubuntu/pool/main/p/python-cryptography/python3-cryptography_41.0.7-4ubuntu0.1_amd64.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/p/python-cryptography/python3-cryptography_41.0.7-4ubuntu0.1_amd64.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:30:45 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Mon, 27 May 2024 14:55:18 GMT
ETag: "c5d8a-61970b4a7b7c8"
Accept-Ranges: bytes
Content-Length: 810378
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package
GET

http://archive.ubuntu.com/ubuntu/pool/main/p/python-idna/python3-idna_3.6-2ubuntu0.1_all.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/p/python-idna/python3-idna_3.6-2ubuntu0.1_all.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:30:45 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 21 May 2024 14:00:28 GMT
ETag: "bf58-618f73d8c05aa"
Accept-Ranges: bytes
Content-Length: 48984
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package
GET

http://archive.ubuntu.com/ubuntu/pool/main/j/jinja2/python3-jinja2_3.1.2-1ubuntu1.1_all.deb

Remote address:

91.189.91.81:80

Request

GET /ubuntu/pool/main/j/jinja2/python3-jinja2_3.1.2-1ubuntu1.1_all.deb HTTP/1.1
Host: archive.ubuntu.com
User-Agent: Debian APT-HTTP/1.3 (2.7.14) non-interactive

Response

HTTP/1.1 200 OK

Date: Sat, 04 Jan 2025 08:30:45 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Tue, 28 May 2024 10:56:10 GMT
ETag: "1a4d2-619817b4c6965"
Accept-Ranges: bytes
Content-Length: 107730
Cache-Control: max-age=86400
Content-Type: application/vnd.debian.binary-package

35.190.72.216:443

location.services.mozilla.com

tls

2.9kB
5.7kB
29
30
88.221.134.137:80

http://r11.o.lencr.org/

http

2.2kB
3.0kB
25
24

HTTP Request

POST http://r11.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://r11.o.lencr.org/

HTTP Response

200
88.221.134.137:80

http://r11.o.lencr.org/

http

2.2kB
3.0kB
25
24

HTTP Request

POST http://r11.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://r11.o.lencr.org/

HTTP Response

200
88.221.134.137:80

http://r11.o.lencr.org/

http

1.6kB
2.0kB
23
22

HTTP Request

POST http://r11.o.lencr.org/

HTTP Response

200
31.220.102.218:80

http://blx.gg/

http

1.6kB
1.5kB
23
22

HTTP Request

GET http://blx.gg/

HTTP Response

301
34.107.221.82:80

http://detectportal.firefox.com/canonical.html

http

2.3kB
2.3kB
33
32

HTTP Request

GET http://detectportal.firefox.com/canonical.html

HTTP Response

200

HTTP Request

GET http://detectportal.firefox.com/canonical.html

HTTP Response

200
151.101.131.19:443

www.mozilla.org

tls

12.1kB
428.4kB
141
379
34.107.221.82:80

http://detectportal.firefox.com/success.txt?ipv4

http

2.8kB
2.4kB
35
34

HTTP Request

GET http://detectportal.firefox.com/success.txt?ipv4

HTTP Response

200

HTTP Request

GET http://detectportal.firefox.com/success.txt?ipv4

HTTP Response

200

HTTP Request

GET http://detectportal.firefox.com/success.txt?ipv4

HTTP Response

200
142.250.178.3:80

http://o.pki.goog/wr2

http

2.7kB
3.9kB
27
26

HTTP Request

POST http://o.pki.goog/s/wr3/jLM

HTTP Response

200

HTTP Request

POST http://o.pki.goog/wr2

HTTP Response

200

HTTP Request

POST http://o.pki.goog/wr2

HTTP Response

200
88.221.135.105:80

http://r10.o.lencr.org/

http

2.7kB
4.0kB
27
26

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200
34.36.165.17:443

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

tls

1.6kB
7.5kB
11
13
34.36.165.17:443

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

tls

3.7kB
29.2kB
37
49
34.36.165.17:443

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

tls

1.5kB
7.5kB
10
13
88.221.135.105:80

http://r10.o.lencr.org/

http

2.2kB
3.0kB
25
24

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200
88.221.135.105:80

http://r10.o.lencr.org/

http

2.2kB
3.0kB
25
24

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200
88.221.134.137:80

http://r10.o.lencr.org/

http

2.2kB
3.0kB
25
24

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200

HTTP Request

POST http://r10.o.lencr.org/

HTTP Response

200
35.201.103.21:443

normandy.cdn.mozilla.net

tls

3.1kB
7.5kB
32
35
34.117.121.53:443

firefox-settings-attachments.cdn.mozilla.net

tls

675.5kB
8.4MB
4859
7992
35.190.72.216:443

classify-client.services.mozilla.com

tls

3.1kB
6.1kB
31
33
31.220.102.218:443

blx.gg

tls

15.8kB
296.5kB
105
256
2.22.144.149:80

http://e6.o.lencr.org/

http

1.6kB
1.9kB
23
22

HTTP Request

POST http://e6.o.lencr.org/

HTTP Response

200
31.220.102.218:443

blx.gg

tls

13.3kB
231.8kB
61
193
31.220.102.218:443

blx.gg

tls

15.2kB
411.5kB
103
332
142.250.187.196:443

www.google.com

tls

4.8kB
51.9kB
47
70
142.250.178.3:80

http://o.pki.goog/wr2

http

2.2kB
2.7kB
25
24

HTTP Request

POST http://o.pki.goog/wr2

HTTP Response

200

HTTP Request

POST http://o.pki.goog/wr2

HTTP Response

200
31.220.102.218:443

blx.gg

tls

7.0kB
113.9kB
53
109
31.220.102.218:443

blx.gg

tls

4.7kB
55.6kB
40
66
31.220.102.218:443

blx.gg

tls

6.2kB
101.8kB
41
97
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.0kB
8.1kB
13
16
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.8kB
80.0kB
18
65
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.6kB
3.7kB
13
13
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.7kB
16.7kB
15
22
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.6kB
11.3kB
13
19
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

4.9kB
383.8kB
58
288
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

11.5kB
1.5MB
185
1125
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.5kB
5.9kB
12
15
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.6kB
3.4kB
13
14
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.6kB
2.4kB
13
12
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.5kB
2.0kB
11
11
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.6kB
2.2kB
13
12
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.6kB
9.2kB
14
17
34.120.158.37:443

tracking-protection.cdn.mozilla.net

tls

2.7kB
11.0kB
15
18
88.221.134.155:80

http://ciscobinary.openh264.org/openh264-linux64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip

http

7.1kB
609.1kB
130
481

HTTP Request

GET http://ciscobinary.openh264.org/openh264-linux64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip

HTTP Response

200
151.101.129.91:443

services.addons.mozilla.org

tls

2.4kB
8.4kB
26
30
34.160.90.233:443

versioncheck-bg.addons.mozilla.org

tls

2.7kB
7.0kB
28
30
142.250.180.10:443

safebrowsing.googleapis.com

tls

25.7kB
7.4MB
465
5176
142.250.178.3:80

http://o.pki.goog/wr2

http

1.6kB
1.9kB
23
22

HTTP Request

POST http://o.pki.goog/wr2

HTTP Response

200
185.125.188.58:443

api.snapcraft.io

tls

18.9kB
48.8kB
33
60
185.125.188.55:443

api.snapcraft.io

tls

2.0kB
5.6kB
11
13
185.125.190.27:443

canonical-lgw01.cdn.snapcraftcontent.com

tls

140.4kB
48.4MB
2674
33908
185.125.188.55:443

api.snapcraft.io

tls

4.3kB
11.2kB
13
21
185.125.188.54:443

api.snapcraft.io

tls

1.4kB
5.6kB
12
13
185.125.188.59:443

api.snapcraft.io

tls

4.4kB
302.1kB
69
243
185.125.188.55:443

api.snapcraft.io

tls

2.0kB
5.7kB
11
13
91.189.91.99:443

canonical-bos01.cdn.snapcraftcontent.com

tls

113.8kB
25.1MB
2168
17713
185.125.188.59:443

api.snapcraft.io

tls

4.4kB
11.3kB
15
22
185.125.188.59:443

api.snapcraft.io

tls

2.0kB
5.7kB
11
13
91.189.91.42:443

canonical-bos01.cdn.snapcraftcontent.com

tls

299.4kB
62.7MB
5734
44090
185.125.188.59:443

api.snapcraft.io

tls

4.3kB
12.0kB
14
21
185.125.188.59:443

api.snapcraft.io

tls

4.6kB
16.7kB
16
24
185.125.190.81:80

http://archive.ubuntu.com/ubuntu/pool/main/g/ghostscript/ghostscript_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb

http

651.7kB
179.0MB
12391
124889

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb

HTTP Response

404

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-sftp-server_9.6p1-3ubuntu13.4_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_9.6p1-3ubuntu13.4_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_9.6p1-3ubuntu13.4_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/n/netplan.io/python3-netplan_1.0-2ubuntu1.2_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/n/netplan.io/netplan-generator_1.0-2ubuntu1.2_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/n/netplan.io/netplan.io_1.0-2ubuntu1.2_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/n/netplan.io/libnetplan1_1.0-2ubuntu1.2_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_3.0.13-0ubuntu3.1_amd64.deb

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/w/wget/wget_1.21.4-1ubuntu4.1_amd64.deb

HTTP Response

404

HTTP Response

200

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/g/ghostscript/ghostscript_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb
185.125.190.83:80

http://security.ubuntu.com/ubuntu/pool/main/i/intel-microcode/intel-microcode_3.20240514.0ubuntu0.24.04.1_amd64.deb

http

2.1kB
4.7kB
10
13

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb

HTTP Response

404

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb

HTTP Response

404

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_3.0.13-0ubuntu3.1_amd64.deb

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/g/ghostscript/ghostscript_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/g/ghostscript/libgs10_10.02.1%7edfsg1-0ubuntu7.3_amd64.deb

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/g/ghostscript/libgs10-common_10.02.1%7edfsg1-0ubuntu7.3_all.deb

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/g/ghostscript/libgs-common_10.02.1%7edfsg1-0ubuntu7.3_all.deb

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff6_4.5.1%2bgit230720-4ubuntu2.1_amd64.deb

HTTP Response

404

HTTP Response

404

HTTP Response

404

HTTP Response

404

HTTP Response

404

HTTP Response

404

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/i/intel-microcode/intel-microcode_3.20240514.0ubuntu0.24.04.1_amd64.deb
185.125.190.81:80

http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-libc-dev_6.8.0-39.39_amd64.deb

http

1.5kB
2.8kB
12
12

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/i/intel-microcode/intel-microcode_3.20240514.0ubuntu0.24.04.1_amd64.deb

HTTP Response

404

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/l/linux-meta/linux-generic_6.8.0-39.39_amd64.deb

HTTP Response

404

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/l/linux-meta/linux-image-generic_6.8.0-39.39_amd64.deb

HTTP Response

404

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/l/linux-meta/linux-headers-generic_6.8.0-39.39_amd64.deb

HTTP Response

404

HTTP Request

GET http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-libc-dev_6.8.0-39.39_amd64.deb

HTTP Response

404
91.189.91.81:80

http://archive.ubuntu.com/ubuntu/pool/main/j/jinja2/python3-jinja2_3.1.2-1ubuntu1.1_all.deb

http

68.2kB
25.0MB
1274
17357

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-headers-6.8.0-39_6.8.0-39.39_all.deb

HTTP Response

200

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-headers-6.8.0-39-generic_6.8.0-39.39_amd64.deb

HTTP Response

200

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/l/linux-meta/linux-headers-generic_6.8.0-39.39_amd64.deb

HTTP Response

404

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-libc-dev_6.8.0-39.39_amd64.deb

HTTP Response

404

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-tools-common_6.8.0-39.39_all.deb

HTTP Response

200

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-tools-6.8.0-39_6.8.0-39.39_amd64.deb

HTTP Response

200

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-tools-6.8.0-39-generic_6.8.0-39.39_amd64.deb

HTTP Response

200

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/p/python-cryptography/python3-cryptography_41.0.7-4ubuntu0.1_amd64.deb

HTTP Response

200

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/p/python-idna/python3-idna_3.6-2ubuntu0.1_all.deb

HTTP Response

200

HTTP Request

GET http://archive.ubuntu.com/ubuntu/pool/main/j/jinja2/python3-jinja2_3.1.2-1ubuntu1.1_all.deb

HTTP Response

200

224.0.0.251:5353

292 B
4
8.8.8.8:53

location.services.mozilla.com

dns

187 B
352 B
2
2

DNS Request

location.services.mozilla.com

DNS Response

35.190.72.216

DNS Request

firefox-settings-attachments.cdn.mozilla.net

DNS Response

34.117.121.53
8.8.8.8:53

location.services.mozilla.com

dns

86 B
238 B
1
1

DNS Request

location.services.mozilla.com
8.8.8.8:53

prod.classify-client.prod.webservices.mozgcp.net

dns

105 B
198 B
1
1

DNS Request

prod.classify-client.prod.webservices.mozgcp.net
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

105 B
198 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

r11.o.lencr.org

dns

72 B
171 B
1
1

DNS Request

r11.o.lencr.org

DNS Response

88.221.134.137

88.221.135.105
8.8.8.8:53

r11.o.lencr.org

dns

72 B
195 B
1
1

DNS Request

r11.o.lencr.org

DNS Response

2a02:26f0:5900::1738:ee48

2a02:26f0:5900::1738:ee5a
8.8.8.8:53

blx.gg

dns

63 B
79 B
1
1

DNS Request

blx.gg

DNS Response

31.220.102.218
8.8.8.8:53

blx.gg

dns

63 B
126 B
1
1

DNS Request

blx.gg
8.8.8.8:53

www.mozilla.org

dns

72 B
177 B
1
1

DNS Request

www.mozilla.org

DNS Response

151.101.131.19

151.101.195.19

151.101.3.19

151.101.67.19
8.8.8.8:53

www.mozilla.org

dns

72 B
225 B
1
1

DNS Request

www.mozilla.org

DNS Response

2a04:4e42:400::787

2a04:4e42::787

2a04:4e42:600::787

2a04:4e42:200::787
8.8.8.8:53

example.org

dns

68 B
84 B
1
1

DNS Request

example.org

DNS Response

93.184.215.14
8.8.8.8:53

example.org

dns

68 B
96 B
1
1

DNS Request

example.org

DNS Response

2606:2800:21f:cb07:6820:80da:af6b:8b2c
8.8.8.8:53

ipv4only.arpa

dns

70 B
102 B
1
1

DNS Request

ipv4only.arpa

DNS Response

192.0.0.171

192.0.0.170
8.8.8.8:53

ipv4only.arpa

dns

70 B
127 B
1
1

DNS Request

ipv4only.arpa
8.8.8.8:53

ipv4only.arpa

dns

70 B
127 B
1
1

DNS Request

ipv4only.arpa
35.190.72.216:443

location.services.mozilla.com

https

12.5kB
9
8.8.8.8:53

spocs.getpocket.com

dns

76 B
142 B
1
1

DNS Request

spocs.getpocket.com

DNS Response

34.117.188.166
8.8.8.8:53

spocs.getpocket.com

dns

76 B
216 B
1
1

DNS Request

spocs.getpocket.com
8.8.8.8:53

prod.ads.prod.webservices.mozgcp.net

dns

93 B
186 B
1
1

DNS Request

prod.ads.prod.webservices.mozgcp.net
8.8.8.8:53

blx.gg

dns

63 B
1

DNS Request

blx.gg
8.8.8.8:53

o.pki.goog

dns

67 B
118 B
1
1

DNS Request

o.pki.goog

DNS Response

142.250.178.3
8.8.8.8:53

o.pki.goog

dns

67 B
130 B
1
1

DNS Request

o.pki.goog

DNS Response

2a00:1450:4009:815::2003
8.8.8.8:53

shavar.prod.mozaws.net

dns

79 B
164 B
1
1

DNS Request

shavar.prod.mozaws.net
8.8.8.8:53

r10.o.lencr.org

dns

72 B
171 B
1
1

DNS Request

r10.o.lencr.org

DNS Response

88.221.135.105

88.221.134.137
8.8.8.8:53

r10.o.lencr.org

dns

72 B
195 B
1
1

DNS Request

r10.o.lencr.org

DNS Response

2a02:26f0:5900::1738:ee48

2a02:26f0:5900::1738:ee5a
8.8.8.8:53

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

dns

103 B
119 B
1
1

DNS Request

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

DNS Response

34.36.165.17
8.8.8.8:53

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

dns

103 B
131 B
1
1

DNS Request

tiles-cdn.prod.ads.prod.webservices.mozgcp.net

DNS Response

2600:1901:0:8e3f::
8.8.8.8:53

telemetry-incoming.r53-2.services.mozilla.com

dns

102 B
184 B
1
1

DNS Request

telemetry-incoming.r53-2.services.mozilla.com
8.8.8.8:53

normandy.cdn.mozilla.net

dns

81 B
144 B
1
1

DNS Request

normandy.cdn.mozilla.net

DNS Response

35.201.103.21
8.8.8.8:53

normandy.cdn.mozilla.net

dns

81 B
206 B
1
1

DNS Request

normandy.cdn.mozilla.net
8.8.8.8:53

www.youtube.com

dns

72 B
346 B
1
1

DNS Request

www.youtube.com

DNS Response

142.250.200.46

216.58.212.238

172.217.169.78

172.217.16.238

172.217.169.46

216.58.204.78

142.250.179.238

216.58.201.110

142.250.180.14

216.58.212.206

142.250.178.14

142.250.187.238

142.250.200.14

142.250.187.206

172.217.169.14
8.8.8.8:53

www.youtube.com

dns

72 B
218 B
1
1

DNS Request

www.youtube.com

DNS Response

2a00:1450:4009:817::200e

2a00:1450:4009:80b::200e

2a00:1450:4009:80a::200e

2a00:1450:4009:818::200e
8.8.8.8:53

www.facebook.com

dns

73 B
118 B
1
1

DNS Request

www.facebook.com

DNS Response

157.240.214.35
8.8.8.8:53

www.facebook.com

dns

73 B
130 B
1
1

DNS Request

www.facebook.com

DNS Response

2a03:2880:f170:81:face:b00c:0:25de
8.8.8.8:53

www.wikipedia.org

dns

74 B
119 B
1
1

DNS Request

www.wikipedia.org

DNS Response

185.15.59.224
8.8.8.8:53

www.wikipedia.org

dns

74 B
1

DNS Request

www.wikipedia.org
8.8.8.8:53

www.olx.pl

dns

67 B
1

DNS Request

www.olx.pl
8.8.8.8:53

www.olx.pl

dns

67 B
1

DNS Request

www.olx.pl
8.8.8.8:53

www.wykop.pl

dns

69 B
1

DNS Request

www.wykop.pl
8.8.8.8:53

www.wykop.pl

dns

69 B
1

DNS Request

www.wykop.pl
8.8.8.8:53

www.amazon.pl

dns

70 B
1

DNS Request

www.amazon.pl
8.8.8.8:53

www.amazon.pl

dns

70 B
1

DNS Request

www.amazon.pl
8.8.8.8:53

allegro.pl

dns

67 B
1

DNS Request

allegro.pl
8.8.8.8:53

allegro.pl

dns

67 B
1

DNS Request

allegro.pl
8.8.8.8:53

temuaffiliateprogram.pxf.io

dns

84 B
1

DNS Request

temuaffiliateprogram.pxf.io
8.8.8.8:53

temuaffiliateprogram.pxf.io

dns

84 B
1

DNS Request

temuaffiliateprogram.pxf.io
8.8.8.8:53

normandy-cdn.services.mozilla.com

dns

90 B
171 B
1
1

DNS Request

normandy-cdn.services.mozilla.com
8.8.8.8:53

ipv4only.arpa

dns

70 B
1

DNS Request

ipv4only.arpa
8.8.8.8:53

tracking-protection.cdn.mozilla.net

dns

92 B
154 B
1
1

DNS Request

tracking-protection.cdn.mozilla.net

DNS Response

34.120.158.37
8.8.8.8:53

tracking-protection.cdn.mozilla.net

dns

92 B
223 B
1
1

DNS Request

tracking-protection.cdn.mozilla.net
8.8.8.8:53

tracking-protection.prod.mozaws.net

dns

92 B
1

DNS Request

tracking-protection.prod.mozaws.net
8.8.8.8:53

firefox-settings-attachments.cdn.mozilla.net

dns

101 B
265 B
1
1

DNS Request

firefox-settings-attachments.cdn.mozilla.net
8.8.8.8:53

attachments.prod.remote-settings.prod.webservices.mozgcp.net

dns

117 B
210 B
1
1

DNS Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

classify-client.services.mozilla.com

dns

93 B
171 B
1
1

DNS Request

classify-client.services.mozilla.com

DNS Response

35.190.72.216
8.8.8.8:53

classify-client.services.mozilla.com

dns

93 B
245 B
1
1

DNS Request

classify-client.services.mozilla.com
8.8.8.8:53

prod.classify-client.prod.webservices.mozgcp.net

dns

105 B
198 B
1
1

DNS Request

prod.classify-client.prod.webservices.mozgcp.net
35.190.72.216:443

classify-client.services.mozilla.com

https

11.1kB
8
1.1.1.1:53

blx.gg

dns

63 B
126 B
1
1

DNS Request

blx.gg
1.1.1.1:53

e6.o.lencr.org

dns

71 B
170 B
1
1

DNS Request

e6.o.lencr.org

DNS Response

2.22.144.149

2.22.144.142
1.1.1.1:53

e6.o.lencr.org

dns

71 B
194 B
1
1

DNS Request

e6.o.lencr.org

DNS Response

2a02:26f0:5900::1738:ee48

2a02:26f0:5900::1738:ee5a
1.1.1.1:53

www.google.com

dns

71 B
87 B
1
1

DNS Request

www.google.com

DNS Response

142.250.187.196
1.1.1.1:53

www.google.com

dns

71 B
99 B
1
1

DNS Request

www.google.com

DNS Response

2a00:1450:4009:81d::2004
142.250.187.196:443

www.google.com

https

15.2kB
11
1.1.1.1:53

www.wikipedia.org

dns

74 B
119 B
1
1

DNS Request

www.wikipedia.org

DNS Response

185.15.59.224
1.1.1.1:53

temuaffiliateprogram.pxf.io

dns

84 B
168 B
1
1

DNS Request

temuaffiliateprogram.pxf.io
1.1.1.1:53

temuaffiliateprogram.pxf.io

dns

84 B
100 B
1
1

DNS Request

temuaffiliateprogram.pxf.io

DNS Response

35.201.76.231
1.1.1.1:53

allegro.pl

dns

67 B
67 B
1
1

DNS Request

allegro.pl
1.1.1.1:53

allegro.pl

dns

67 B
83 B
1
1

DNS Request

allegro.pl

DNS Response

185.31.27.160
1.1.1.1:53

www.amazon.pl

dns

70 B
373 B
1
1

DNS Request

www.amazon.pl

DNS Response

2600:9000:2682:5e00:11:4cdd:b6c0:93a1

2600:9000:2682:5200:11:4cdd:b6c0:93a1

2600:9000:2682:1a00:11:4cdd:b6c0:93a1

2600:9000:2682:fc00:11:4cdd:b6c0:93a1

2600:9000:2682:a200:11:4cdd:b6c0:93a1

2600:9000:2682:5800:11:4cdd:b6c0:93a1

2600:9000:2682:2200:11:4cdd:b6c0:93a1

2600:9000:2682:d400:11:4cdd:b6c0:93a1
1.1.1.1:53

www.amazon.pl

dns

70 B
213 B
1
1

DNS Request

www.amazon.pl

DNS Response

18.245.253.12

18.245.253.2

18.245.253.118

18.245.253.104
1.1.1.1:53

www.wykop.pl

dns

69 B
133 B
1
1

DNS Request

www.wykop.pl
1.1.1.1:53

www.wykop.pl

dns

69 B
131 B
1
1

DNS Request

www.wykop.pl

DNS Response

146.59.55.142

146.59.88.0

146.59.79.191
1.1.1.1:53

www.olx.pl

dns

67 B
195 B
1
1

DNS Request

www.olx.pl
1.1.1.1:53

www.olx.pl

dns

67 B
174 B
1
1

DNS Request

www.olx.pl

DNS Response

18.244.124.77

18.244.124.17

18.244.124.40

18.244.124.3
1.1.1.1:53

www.wikipedia.org

dns

74 B
131 B
1
1

DNS Request

www.wikipedia.org

DNS Response

2a02:ec80:300:ed1a::1
1.1.1.1:53

d3rlbd2j6pzlef.cloudfront.net

dns

86 B
171 B
1
1

DNS Request

d3rlbd2j6pzlef.cloudfront.net
1.1.1.1:53

ipv4only.arpa

dns

70 B
102 B
1
1

DNS Request

ipv4only.arpa

DNS Response

192.0.0.170

192.0.0.171
1.1.1.1:53

ipv4only.arpa

dns

70 B
127 B
1
1

DNS Request

ipv4only.arpa
1.1.1.1:53

ipv4only.arpa

dns

70 B
127 B
1
1

DNS Request

ipv4only.arpa
1.1.1.1:53

tracking-protection.cdn.mozilla.net

dns

92 B
154 B
1
1

DNS Request

tracking-protection.cdn.mozilla.net

DNS Response

34.120.158.37
1.1.1.1:53

tracking-protection.prod.mozaws.net

dns

92 B
177 B
1
1

DNS Request

tracking-protection.prod.mozaws.net
1.1.1.1:53

prod.balrog.prod.cloudops.mozgcp.net

dns

93 B
186 B
1
1

DNS Request

prod.balrog.prod.cloudops.mozgcp.net
1.1.1.1:53

ciscobinary.openh264.org

dns

81 B
297 B
1
1

DNS Request

ciscobinary.openh264.org

DNS Response

88.221.134.155

88.221.134.209
1.1.1.1:53

ciscobinary.openh264.org

dns

81 B
321 B
1
1

DNS Request

ciscobinary.openh264.org

DNS Response

2a02:26f0:a1::58dd:869b

2a02:26f0:a1::58dd:86d1
1.1.1.1:53

services.addons.mozilla.org

dns

84 B
148 B
1
1

DNS Request

services.addons.mozilla.org

DNS Response

151.101.129.91

151.101.1.91

151.101.193.91

151.101.65.91
1.1.1.1:53

services.addons.mozilla.org

dns

84 B
196 B
1
1

DNS Request

services.addons.mozilla.org

DNS Response

2a04:4e42:400::347

2a04:4e42:600::347

2a04:4e42:200::347

2a04:4e42::347
1.1.1.1:53

versioncheck-bg.addons.mozilla.org

dns

91 B
107 B
1
1

DNS Request

versioncheck-bg.addons.mozilla.org

DNS Response

34.160.90.233
1.1.1.1:53

versioncheck-bg.addons.mozilla.org

dns

91 B
172 B
1
1

DNS Request

versioncheck-bg.addons.mozilla.org
34.160.90.233:443

versioncheck-bg.addons.mozilla.org

https

13.8kB
10
1.1.1.1:53

safebrowsing.googleapis.com

dns

84 B
100 B
1
1

DNS Request

safebrowsing.googleapis.com

DNS Response

142.250.180.10
1.1.1.1:53

safebrowsing.googleapis.com

dns

84 B
112 B
1
1

DNS Request

safebrowsing.googleapis.com

DNS Response

2a00:1450:4009:81d::200a
1.1.1.1:53

o.pki.goog

dns

67 B
1

DNS Request

o.pki.goog
1.1.1.1:53

o.pki.goog

dns

67 B
130 B
1
1

DNS Request

o.pki.goog

DNS Response

2a00:1450:4009:821::2003
142.250.180.10:443

safebrowsing.googleapis.com

https

13.8kB
10
8.8.8.8:53

o.pki.goog

dns

67 B
118 B
1
1

DNS Request

o.pki.goog

DNS Response

142.250.178.3
8.8.8.8:53

pki-goog.l.google.com

dns

78 B
1

DNS Request

pki-goog.l.google.com
8.8.8.8:53

ipv4only.arpa

dns

70 B
102 B
1
1

DNS Request

ipv4only.arpa

DNS Response

192.0.0.171

192.0.0.170
1.1.1.1:53

pki-goog.l.google.com

dns

78 B
106 B
1
1

DNS Request

pki-goog.l.google.com

DNS Response

2a00:1450:4009:827::2003
1.1.1.1:53

ipv4only.arpa

dns

70 B
127 B
1
1

DNS Request

ipv4only.arpa
1.1.1.1:53

ipv4only.arpa

dns

70 B
1

DNS Request

ipv4only.arpa
1.1.1.1:53

firefox-settings-attachments.cdn.mozilla.net

dns

101 B
1

DNS Request

firefox-settings-attachments.cdn.mozilla.net
1.1.1.1:53

firefox-settings-attachments.cdn.mozilla.net

dns

101 B
1

DNS Request

firefox-settings-attachments.cdn.mozilla.net
8.8.8.8:53

prod.detectportal.prod.cloudops.mozgcp.net

dns

99 B
127 B
1
1

DNS Request

prod.detectportal.prod.cloudops.mozgcp.net

DNS Response

2600:1901:0:38d7::
8.8.8.8:53

ipv4only.arpa

dns

70 B
102 B
1
1

DNS Request

ipv4only.arpa

DNS Response

192.0.0.171

192.0.0.170
8.8.8.8:53

ipv4only.arpa

dns

70 B
127 B
1
1

DNS Request

ipv4only.arpa
8.8.8.8:53

ipv4only.arpa

dns

70 B
127 B
1
1

DNS Request

ipv4only.arpa
8.8.8.8:53

firefox-settings-attachments.cdn.mozilla.net

dns

101 B
265 B
1
1

DNS Request

firefox-settings-attachments.cdn.mozilla.net
8.8.8.8:53

firefox-settings-attachments.cdn.mozilla.net

dns

101 B
188 B
1
1

DNS Request

firefox-settings-attachments.cdn.mozilla.net

DNS Response

34.117.121.53
8.8.8.8:53

attachments.prod.remote-settings.prod.webservices.mozgcp.net

dns

117 B
210 B
1
1

DNS Request

attachments.prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

api.snapcraft.io

dns

73 B
137 B
1
1

DNS Request

api.snapcraft.io

DNS Response

185.125.188.58

185.125.188.54

185.125.188.59

185.125.188.55
8.8.8.8:53

api.snapcraft.io

dns

73 B
185 B
1
1

DNS Request

api.snapcraft.io

DNS Response

2620:2d:4000:1010::42

2620:2d:4000:1010::117

2620:2d:4000:1010::6d

2620:2d:4000:1010::2e6
8.8.8.8:53

canonical-lgw01.cdn.snapcraftcontent.com

dns

97 B
145 B
1
1

DNS Request

canonical-lgw01.cdn.snapcraftcontent.com

DNS Response

185.125.190.27

185.125.190.26

185.125.190.28
8.8.8.8:53

canonical-lgw01.cdn.snapcraftcontent.com

dns

97 B
158 B
1
1

DNS Request

canonical-lgw01.cdn.snapcraftcontent.com
8.8.8.8:53

api.snapcraft.io

dns

73 B
137 B
1
1

DNS Request

api.snapcraft.io

DNS Response

185.125.188.55

185.125.188.59

185.125.188.58

185.125.188.54
8.8.8.8:53

canonical-bos01.cdn.snapcraftcontent.com

dns

97 B
177 B
1
1

DNS Request

canonical-bos01.cdn.snapcraftcontent.com

DNS Response

91.189.91.99

91.189.91.43

91.189.91.100

91.189.91.42

91.189.91.101
8.8.8.8:53

canonical-bos01.cdn.snapcraftcontent.com

dns

97 B
237 B
1
1

DNS Request

canonical-bos01.cdn.snapcraftcontent.com

DNS Response

2620:2d:4002:1::32

2620:2d:4002:1::33

2620:2d:4002:1::34

2001:67c:1562::1e

2001:67c:1562::1d
8.8.8.8:53

api.snapcraft.io

dns

73 B
137 B
1
1

DNS Request

api.snapcraft.io

DNS Response

185.125.188.59

185.125.188.55

185.125.188.54

185.125.188.58
8.8.8.8:53

api.snapcraft.io

dns

73 B
137 B
1
1

DNS Request

api.snapcraft.io

DNS Response

185.125.188.59

185.125.188.54

185.125.188.55

185.125.188.58
8.8.8.8:53

api.snapcraft.io

dns

73 B
185 B
1
1

DNS Request

api.snapcraft.io

DNS Response

2620:2d:4000:1010::42

2620:2d:4000:1010::6d

2620:2d:4000:1010::2e6

2620:2d:4000:1010::117
8.8.8.8:53

api.snapcraft.io

dns

73 B
185 B
1
1

DNS Request

api.snapcraft.io

DNS Response

2620:2d:4000:1010::117

2620:2d:4000:1010::42

2620:2d:4000:1010::6d

2620:2d:4000:1010::2e6
8.8.8.8:53

_http._tcp.archive.ubuntu.com

dns

86 B
147 B
1
1

DNS Request

_http._tcp.archive.ubuntu.com
8.8.8.8:53

archive.ubuntu.com

dns

75 B
171 B
1
1

DNS Request

archive.ubuntu.com

DNS Response

185.125.190.81

91.189.91.81

185.125.190.82

185.125.190.83

91.189.91.82

91.189.91.83
8.8.8.8:53

archive.ubuntu.com

dns

75 B
243 B
1
1

DNS Request

archive.ubuntu.com

DNS Response

2620:2d:4002:1::103

2620:2d:4002:1::101

2620:2d:4000:1::102

2620:2d:4000:1::103

2620:2d:4002:1::102

2620:2d:4000:1::101
8.8.8.8:53

_http._tcp.security.ubuntu.com

dns

87 B
148 B
1
1

DNS Request

_http._tcp.security.ubuntu.com
8.8.8.8:53

security.ubuntu.com

dns

76 B
172 B
1
1

DNS Request

security.ubuntu.com

DNS Response

185.125.190.83

185.125.190.81

91.189.91.81

91.189.91.83

185.125.190.82

91.189.91.82
8.8.8.8:53

security.ubuntu.com

dns

76 B
244 B
1
1

DNS Request

security.ubuntu.com

DNS Response

2620:2d:4002:1::103

2620:2d:4000:1::101

2620:2d:4002:1::102

2620:2d:4000:1::103

2620:2d:4000:1::102

2620:2d:4002:1::101

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response