Overview

URLwww.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/
IP 109.116.126.217 (Italy)
ASN#30722 Vodafone Italia S.p.A.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-10-28 05:39:03 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (7)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.cisnc.it (1) 0 2022-06-07 20:51:50 UTC 2022-10-25 01:07:34 UTC 109.116.126.217 Unknown ranking
push.services.mozilla.com (1) 2140 2019-05-26 10:52:39 UTC 2020-05-03 10:09:39 UTC 35.161.6.128
img-getpocket.cdn.mozilla.net (6) 1631 2019-03-04 20:37:34 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
r3.o.lencr.org (3) 344 No data No data 23.36.76.226
ocsp.digicert.com (3) 86 2012-06-27 22:09:06 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-27 04:50:21 UTC 34.117.237.239

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-10-28 2 cisnc.it Sinkholed


Files

URL www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/
IP  109.116.126.217
Magic PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows\012- data
Size 670467
MD5 05aa3aad4b372106307b0d36b9d38319
SHA1 83fc778fd773674290e5dedc2e0c05c83b510169
SHA256 2aa0664182697254e16ccab27c2c408d08128da365fedad80e1272ee43d40dde
Analyzer Analysed Verdict Comment
VirusTotal  VirusTotal Report

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 109.116.126.217
Date UQ / IDS / BL URL IP
2023-01-28 09:46:03 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 06:35:09 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 03:26:46 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 00:08:28 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-27 20:59:48 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217


Last 5 reports on ASN: Vodafone Italia S.p.A.
Date UQ / IDS / BL URL IP
2023-01-28 09:46:03 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 06:35:09 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 03:26:46 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 01:24:17 +0000 0 - 0 - 16 37.119.250.212/ 37.119.250.212
2023-01-28 00:08:28 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217


Last 5 reports on domain: cisnc.it
Date UQ / IDS / BL URL IP
2023-01-28 09:46:03 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 06:35:09 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 03:26:46 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-28 00:08:28 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217
2023-01-27 20:59:48 +0000 0 - 2 - 1 www.cisnc.it/wp-content/SgCbrIRyUwb9kjEKe3J/ 109.116.126.217


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-28 10:49:54 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/91698825753383 (...) 162.159.129.233
2023-01-28 10:49:49 +0000 0 - 1 - 2 marksidfgs.ug/asdf.EXE 91.215.85.158
2023-01-28 10:49:27 +0000 0 - 1 - 0 pkg-store.dl.mail.ru/packages/shop/0_2000946d (...) 188.93.63.73
2023-01-28 10:49:21 +0000 0 - 3 - 2 94.53.120.109/dusers.exe 94.53.120.109
2023-01-28 10:49:17 +0000 0 - 1 - 1 downloads.bcweb.org.uk/programs/spoolerfix.exe 195.74.154.218

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (16)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DF036D315A613AC6396B77AFB0A4EA5F793091786BE0CBF3F3A0D043BC1D1D3C"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10409
Expires: Fri, 28 Oct 2022 08:32:21 GMT
Date: Fri, 28 Oct 2022 05:38:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4118
Cache-Control: max-age=104455
Date: Fri, 28 Oct 2022 05:38:52 GMT
Etag: "635a4fdd-1d7"
Expires: Sat, 29 Oct 2022 10:39:47 GMT
Last-Modified: Thu, 27 Oct 2022 09:31:09 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4118
Cache-Control: max-age=104455
Date: Fri, 28 Oct 2022 05:38:52 GMT
Etag: "635a4fdd-1d7"
Expires: Sat, 29 Oct 2022 10:39:47 GMT
Last-Modified: Thu, 27 Oct 2022 09:31:09 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2F53662C68C9EA7BE85837310861C8007FD039E5E4D8EB8F0D8948D5D1571A03"
Last-Modified: Thu, 27 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15596
Expires: Fri, 28 Oct 2022 09:58:48 GMT
Date: Fri, 28 Oct 2022 05:38:52 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: BX/jznq+JyUExMJ7cnyFT0xPZcgyzQ8ySnNkeY+7On/rKrlg/n6KgmCbCE8Bl+zw8tvZLkUsCGg=
x-amz-request-id: 47SB08Q3V9FMBT7V
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 28 Oct 2022 05:10:08 GMT
age: 1724
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 28 Oct 2022 05:38:52 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /wp-content/SgCbrIRyUwb9kjEKe3J/ HTTP/1.1 
Host: www.cisnc.it
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         109.116.126.217
HTTP/1.1 200 OK
Content-Type: application/x-msdownload
                                        
Date: Fri, 28 Oct 2022 05:38:52 GMT
Server: Apache/2.4.41 (Ubuntu)
Set-Cookie: 635b6aec990f3=1666935532; expires=Fri, 28-Oct-2022 05:39:52 GMT; Max-Age=60; path=/
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Last-Modified: Fri, 28 Oct 2022 05:38:52 GMT
Expires: Fri, 28 Oct 2022 05:38:52 GMT
Content-Disposition: attachment; filename="WPSX8qtVOKLGGawx326.dll"
Content-Transfer-Encoding: binary
Content-Length: 670467
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows\012- data
Size:   670467
Md5:    05aa3aad4b372106307b0d36b9d38319
Sha1:   83fc778fd773674290e5dedc2e0c05c83b510169
Sha256: 2aa0664182697254e16ccab27c2c408d08128da365fedad80e1272ee43d40dde

Alerts:
  Blocklists:
    - quad9: Sinkholed
  File Analyzers:
    - virustotal: 45/65
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1031
Cache-Control: max-age=96307
Date: Fri, 28 Oct 2022 05:38:53 GMT
Etag: "635a3c19-1d7"
Expires: Sat, 29 Oct 2022 08:24:00 GMT
Last-Modified: Thu, 27 Oct 2022 08:06:49 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rLVjw0ITycVeOyvUGJxO6A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.161.6.128
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1+biP6EthKcAOeFDNe6XBHohNj0=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5337
Expires: Fri, 28 Oct 2022 07:07:52 GMT
Date: Fri, 28 Oct 2022 05:38:55 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a4f2e78-4c98-4f44-b823-f9f9c3850dab.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8759
x-amzn-requestid: b8158571-eda8-4aec-9595-a4082b7bee5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arwwIEdzIAMFvnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb33-7f65d3997faa3c5520e6b51f;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:11 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U7Xxk7NDKFyC4jUkSmUBeLvBTqqEnQOR8tzfKAzyf2sFbw9JOQ7QWw==
via: 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:27:25 GMT
age: 25890
etag: "2a9686597b6baded54a9dbead224193825d2fddf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8759
Md5:    36abb19bfc8dc656604d1aaf0f9535f8
Sha1:   2a9686597b6baded54a9dbead224193825d2fddf
Sha256: d1577656aafce56a2088479a357df0df8bfef92952290cef14cca89d43043ab8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6e2a26-e87a-4329-8df1-ba2276a57eba.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14602
x-amzn-requestid: f3e186c6-4734-4c1b-a432-aa799a12ed4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arv9yGaMoAMFZ4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635af9f1-05c8bdc2153acd8915e04826;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -LtByCyKdn883A5CbwMzP1WXAsdL1X8sDa8qyRWuDmYGUNS-u9xTJA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:28:50 GMT
age: 25805
etag: "9d0fc7b50cbb96a3e85ccb501ed1d60a39a164d3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14602
Md5:    13bafc15fa2fe97e27115e17bce8b22f
Sha1:   9d0fc7b50cbb96a3e85ccb501ed1d60a39a164d3
Sha256: 734419d9f9c28185501c25db3e0df01f2dc901a1a87bcdd066028392c8c82cf5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F763d669f-e7a7-4a98-adaf-5316f96ef18e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7436
x-amzn-requestid: f6e2c641-406d-401b-b2df-83c4ea69ad3b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arwwIFuSoAMFVuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb33-5a2647d6231e8ad40f6a2335;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zz7z9urOnatwDD7s4ihvxkySKBLUFR0YvxGW3jy6Oa55ojQrOoAcUA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:29:04 GMT
age: 25791
etag: "bb13bb4f8876e00be7fb70e0b4f6cd52d0165458"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7436
Md5:    134b31ca1a6cb74ab6f6c21e27114883
Sha1:   bb13bb4f8876e00be7fb70e0b4f6cd52d0165458
Sha256: 539ee95d515835ade79c63a5c85c138678019563ac0e2f86bcfd7fcc0dc9dce2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ee9a743-41f5-42f0-855e-53c4f9175a44.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8323
x-amzn-requestid: 4b90019d-6e8c-498d-8627-e4f0c9dda30e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arw0gGYKoAMFRBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb4f-620a4264143fc3fd207acc5e;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NPWfRW5iNN1bcEzJGGlGa8kBWq-t_cOrbImZBUTaFi7QjGhjAj0GZQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 21:58:21 GMT
age: 27634
etag: "7ab34ed8ae4e7048edd25f8b533d5237dea83688"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8323
Md5:    348e4d5f46d652d497f9ad078d1dea3e
Sha1:   7ab34ed8ae4e7048edd25f8b533d5237dea83688
Sha256: dd02da6461e36a128579a3fb26da4c7f303b5683b27a7bd7a50309d4101cba3e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7ae3f5f-2ad2-4657-9c59-970709de0e4c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9524
x-amzn-requestid: cf9fb5f2-f15d-417b-9302-ea8d637a41c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arv9wGwnoAMFv1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635af9f1-0dc00df943d3134a10431150;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TR8ySgPaQysnpmBBcBk5HME7ySmMN5eU-YAbThsx6M2zkkjgv2J43w==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 21:41:28 GMT
age: 28647
etag: "1a3950ad4ea93feb2f96b384f888579e9326b466"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9524
Md5:    6e15c371921bf562b83ac8159b1e4a27
Sha1:   1a3950ad4ea93feb2f96b384f888579e9326b466
Sha256: 369603c397a5ee39badc420359675960ba56604f6dc8a4269decc87479b0f461
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8936
x-amzn-requestid: d0698fc0-e4c9-4633-9b64-df09be35b450
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aocuiGBlIAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359a7f6-7c78a1fc43552b934e6b8708;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 21:34:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gus8UKo03dRkfqPRhxnW6zzqx7o-2tZbbv-DsBSW7UREHPOA1uqdUw==
via: 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:12:58 GMT
age: 26757
etag: "b05b7299a7e473e873510671a6abdd5227a53f46"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8936
Md5:    eb430e5efbc6c8c306fce87e26faf734
Sha1:   b05b7299a7e473e873510671a6abdd5227a53f46
Sha256: c49d64e87ec8243a1ee7f214f21988b6f6a33ba93814ec31262d80e4a22b8504