Overview

URL amitempo.com/hic-est/dolor.zip
IP35.197.227.153
ASNGOOGLE
Location United Kingdom
Report completed2022-06-26 07:03:31 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-06-26 2 amitempo.com/hic-est/dolor.zip Malware
2022-06-26 2 amitempo.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets (...) Malware
mnemonic secure dns  No alerts detected
Quad9 DNS
Added / Verified Severity Host Comment
2022-06-26 2 amitempo.com Sinkholed
2022-06-26 2 amitempo.com Sinkholed
2022-06-26 2 amitempo.com Sinkholed
2022-06-26 2 amitempo.com Sinkholed
2022-06-26 2 amitempo.com Sinkholed
2022-06-26 2 amitempo.com Sinkholed


Files

No files detected



Passive DNS (10)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] ocsp.pki.goog (3) 175 2017-06-14 07:23:31 UTC 2022-06-26 05:00:34 UTC 142.250.74.3
[Mnemonic Passive DNS] fonts.gstatic.com (2) 0 2017-01-30 04:59:51 UTC 2022-06-26 05:00:14 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-06-26 04:22:13 UTC 34.120.237.76
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-06-26 05:39:17 UTC 93.184.220.29
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-06-26 04:22:22 UTC 35.160.82.219
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-06-26 05:33:42 UTC 54.230.111.14
[Mnemonic Passive DNS] amitempo.com (6) 0 No data No data 35.197.227.153 Unknown ranking
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.7
[Mnemonic Passive DNS] r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-06-25 05:00:24 UTC 23.36.76.226


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 35.197.227.153

Date UQ / IDS / BL URL IP
2022-08-16 06:28:53 +0000
0 - 0 - 10 amitempo.com/hic-est/voluptates.zip 35.197.227.153
2022-08-16 06:28:31 +0000
0 - 0 - 9 amitempo.com/hic-est/molestias.zip 35.197.227.153
2022-08-16 06:27:54 +0000
0 - 0 - 11 amitempo.com/hic-est/tempora.zip 35.197.227.153
2022-08-16 05:17:14 +0000
0 - 0 - 8 amitempo.com/hic-est/labore.zip 35.197.227.153
2022-08-16 05:16:49 +0000
0 - 0 - 9 amitempo.com/hic-est/dolor.zip 35.197.227.153
2022-08-16 05:16:47 +0000
0 - 0 - 6 amitempo.com/hic-est/nisi.zip 35.197.227.153
2022-08-15 06:24:25 +0000
0 - 0 - 5 amitempo.com/hic-est/molestias.zip 35.197.227.153
2022-08-14 23:56:18 +0000
0 - 0 - 8 amitempo.com/hic-est/incidunt.zip 35.197.227.153
2022-08-14 22:01:07 +0000
0 - 0 - 9 amitempo.com/hic-est/molestiae.zip 35.197.227.153
2022-08-14 18:07:24 +0000
0 - 0 - 12 amitempo.com/hic-est/molestias.zip 35.197.227.153

Last 10 reports on ASN: GOOGLE

Date UQ / IDS / BL URL IP
2022-08-16 15:59:46 +0000
0 - 0 - 1 instagramsliding24.blogspot.com.ng/ 142.250.74.161
2022-08-16 15:59:37 +0000
0 - 0 - 1 instagramsliding24.blogspot.com.ee/ 142.250.74.161
2022-08-16 15:59:35 +0000
0 - 0 - 1 httpslazadasharepocket.blogspot.com.ar/ 142.250.74.161
2022-08-16 15:59:34 +0000
0 - 0 - 1 instagramsliding24.blogspot.md/ 142.250.74.161
2022-08-16 15:59:12 +0000
0 - 0 - 1 httpslazadasharepocket.blogspot.com.cy/ 142.250.74.161
2022-08-16 15:56:48 +0000
0 - 0 - 3 officialwebsitere.blogspot.com.ar/ 142.250.74.161
2022-08-16 15:50:22 +0000
0 - 0 - 2 746269172299011839374626917229901183.blogspot.com/ 142.250.74.161
2022-08-16 15:45:31 +0000
0 - 0 - 3 officialwebsitefr.blogspot.rs/?m=1 142.250.74.161
2022-08-16 15:44:09 +0000
0 - 0 - 1 www.movingintofreedom.com/wp-content/plugins/ (...) 34.102.136.180
2022-08-16 15:44:04 +0000
0 - 0 - 45 coopacredito.com/cdrom/8/OMvPB517Q.zip 35.209.214.178

Last 10 reports on domain: amitempo.com

Date UQ / IDS / BL URL IP
2022-08-16 06:28:53 +0000
0 - 0 - 10 amitempo.com/hic-est/voluptates.zip 35.197.227.153
2022-08-16 06:28:31 +0000
0 - 0 - 9 amitempo.com/hic-est/molestias.zip 35.197.227.153
2022-08-16 06:27:54 +0000
0 - 0 - 11 amitempo.com/hic-est/tempora.zip 35.197.227.153
2022-08-16 05:17:14 +0000
0 - 0 - 8 amitempo.com/hic-est/labore.zip 35.197.227.153
2022-08-16 05:16:49 +0000
0 - 0 - 9 amitempo.com/hic-est/dolor.zip 35.197.227.153
2022-08-16 05:16:47 +0000
0 - 0 - 6 amitempo.com/hic-est/nisi.zip 35.197.227.153
2022-08-15 06:24:25 +0000
0 - 0 - 5 amitempo.com/hic-est/molestias.zip 35.197.227.153
2022-08-14 23:56:18 +0000
0 - 0 - 8 amitempo.com/hic-est/incidunt.zip 35.197.227.153
2022-08-14 22:01:07 +0000
0 - 0 - 9 amitempo.com/hic-est/molestiae.zip 35.197.227.153
2022-08-14 18:07:24 +0000
0 - 0 - 12 amitempo.com/hic-est/molestias.zip 35.197.227.153


JavaScript

Executed Scripts (9)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (30)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 26 Jun 2022 06:46:02 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: V1mi7IPBlWGQ_MdydL1A0jg3CeI33Ox1Pm_iDoiUh_uhQWLVy5GE2g==
Age: 1034


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B2CEB864B9C1A231269357C6D1FFC192D76116996A5363EE4A1B4B149AAD447A"
Last-Modified: Fri, 24 Jun 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12218
Expires: Sun, 26 Jun 2022 10:26:54 GMT
Date: Sun, 26 Jun 2022 07:03:16 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.14
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Wed, 11 May 2022 19:51:39 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 26 Jun 2022 02:10:54 GMT
etag: "48ca0beea419a9039591cf1aee5179e0"
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: P8BAm0mdGJi4s6NjrwxYEVmZEhoQteCow2cxyOqWoITGIJ0fSnurKA==
age: 17543
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    48ca0beea419a9039591cf1aee5179e0
Sha1:   9e92629f505fcc07aab51221e8fe62197a23e307
Sha256: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
                                        
                                            GET /hic-est/dolor.zip HTTP/1.1 
Host: amitempo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         35.197.227.153
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 26 Jun 2022 07:03:16 GMT
Content-Length: 162
Connection: keep-alive
Location: https://amitempo.com/hic-est/dolor.zip
X-HTTPS-Enforce: 1
X-CDN-C: static
X-SG-CDN: 1
X-Proxy-Cache: MISS
X-Proxy-Cache-Info: 0301 NC:000000 UP:
Host-Header: 8441280b0c35cbc1147f8ba998a563a7


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 26 Jun 2022 07:03:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "55FAFA7110175EA607A0403EF152DA669255A12634FA3AB1D4B7CD1659D0ECC2"
Last-Modified: Sun, 26 Jun 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21219
Expires: Sun, 26 Jun 2022 12:56:55 GMT
Date: Sun, 26 Jun 2022 07:03:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5748
Cache-Control: 'max-age=158059'
Date: Sun, 26 Jun 2022 07:03:16 GMT
Etag: "62b6c244-1d7"
Last-Modified: Sun, 26 Jun 2022 05:27:28 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 26 Jun 2022 06:31:51 GMT
Expires: Sun, 26 Jun 2022 06:39:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QuwziE0VNcegwEp9zxEQ55tV2N97gVgUJSLziB5iD5gZEKCflEhqTQ==
Age: 1886


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dxy0eeY8ONI/MfdNV5mzFg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.160.82.219
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8AgtrpdTpPiAn4A5qMYETzQc+UY=

                                        
                                            GET /wp-content/themes/Divi/images/logo.png HTTP/1.1 
Host: amitempo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amitempo.com/hic-est/dolor.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.197.227.153
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 26 Jun 2022 07:03:17 GMT
content-type: image/png
content-length: 1740
last-modified: Tue, 17 May 2022 15:58:28 GMT
etag: "6283c624-6cc"
expires: Mon, 26 Jun 2023 06:57:03 GMT
cache-control: max-age=31536000
x-cdn-c: static
x-sg-cdn: 1
x-proxy-cache: HIT
host-header: 8441280b0c35cbc1147f8ba998a563a7
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 93 x 43, 8-bit/color RGBA, non-interlaced\012- data
Size:   1740
Md5:    e2daf4c3723952752b6fe6285f353ea2
Sha1:   29b2b4b27bbcb73490b7db78de2f74a34d011de9
Sha256: cf520886e248a0fad2dffd2e44bd9ba546d0d8f5e750f182397be7d16680b20f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 26 Jun 2022 07:03:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.17.4 HTTP/1.1 
Host: amitempo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amitempo.com/hic-est/dolor.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.197.227.153
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 26 Jun 2022 07:03:17 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 17 May 2022 15:58:28 GMT
etag: W/"6283c624-53f"
expires: Mon, 26 Jun 2023 06:57:03 GMT
cache-control: max-age=31536000
x-cdn-c: static
content-encoding: gzip
x-sg-cdn: 1
x-proxy-cache: HIT
host-header: 8441280b0c35cbc1147f8ba998a563a7
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1070
Md5:    8c99f34b51110218ae558b8603d6e787
Sha1:   8a89057817f174ea3703baca027300721eb90575
Sha256: 63e311678723658926a8aca6bcacaa0f2cc7a02ab08433adb999c4db428f29cb

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 26 Jun 2022 07:03:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.17.4 HTTP/1.1 
Host: amitempo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amitempo.com/hic-est/dolor.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.197.227.153
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 26 Jun 2022 07:03:17 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 17 May 2022 15:58:28 GMT
etag: W/"6283c624-d15"
expires: Mon, 26 Jun 2023 06:57:03 GMT
cache-control: max-age=31536000
x-cdn-c: static
content-encoding: gzip
x-sg-cdn: 1
x-proxy-cache: HIT
host-header: 8441280b0c35cbc1147f8ba998a563a7
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   18134
Md5:    5db9f43de5eb3e655081d66aa86a2b1b
Sha1:   85b207d58743bde6e40d5b0cb44b13435ea8b349
Sha256: 9f30372f3db52d97c69f317317ddeec380b8beb6c6ba20d354fcc5638402bea9

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /s/opensans/v29/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amitempo.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16360
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Jun 2022 19:35:18 GMT
expires: Thu, 22 Jun 2023 19:35:18 GMT
cache-control: public, max-age=31536000
age: 300479
last-modified: Wed, 11 May 2022 19:25:15 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16360, version 1.0\012- data
Size:   16360
Md5:    4333f8c1f02dee549bdb7353a3b48e82
Sha1:   a6bd7db06cf5ea54c529c1c8efc81cb805fa51e3
Sha256: e3f25c51e5e6f03dc0513385a1d8730f36537309864c444ab253ed66b2bf2db3
                                        
                                            GET /s/opensans/v29/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4gaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amitempo.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Jun 2022 19:35:18 GMT
expires: Thu, 22 Jun 2023 19:35:18 GMT
cache-control: public, max-age=31536000
age: 300479
last-modified: Wed, 11 May 2022 19:25:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16796, version 1.0\012- data
Size:   16796
Md5:    f39b602d1b08fc398343e5c11cf8cd87
Sha1:   944ea7b3ca302c92a6414f203ab47803da20948b
Sha256: 511b67b07a90c30bed95a6e3b1a7708d978d53f01e5fad89403590aaf22fb134
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 26 Jun 2022 07:03:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: amitempo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://amitempo.com/hic-est/dolor.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.197.227.153
HTTP/2 302 Found
                                        
server: nginx
date: Sun, 26 Jun 2022 07:03:18 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://amitempo.com/wp-includes/images/w-logo-blue-white-bg.png
sg-f-cache: BYPASS
x-cache-enabled: True
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
link: <https://amitempo.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
x-httpd-modphp: 1
x-cdn-c: static
x-sg-cdn: 1
x-proxy-cache: MISS
x-proxy-cache-info: 0302 NC:000000 UP:
host-header: 8441280b0c35cbc1147f8ba998a563a7
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1 
Host: amitempo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amitempo.com/hic-est/dolor.zip
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         35.197.227.153
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 26 Jun 2022 07:03:18 GMT
content-type: image/png
content-length: 4119
last-modified: Tue, 17 May 2022 15:51:41 GMT
etag: "6283c48d-1017"
expires: Mon, 26 Jun 2023 06:57:04 GMT
cache-control: max-age=31536000
x-cdn-c: static
x-sg-cdn: 1
x-proxy-cache: HIT
host-header: 8441280b0c35cbc1147f8ba998a563a7
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size:   4119
Md5:    000bf649cc8f6bf27cfb04d1bcdcd3c7
Sha1:   d73d2f6d74ec6cdcbae07955592962e77d8ae814
Sha256: 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9A4C6D127F3E8F2083A588B1B6818BD65AF7810F7C768B54964E17690F0BB083"
Last-Modified: Fri, 24 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Sun, 26 Jun 2022 08:23:47 GMT
Date: Sun, 26 Jun 2022 07:03:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9A4C6D127F3E8F2083A588B1B6818BD65AF7810F7C768B54964E17690F0BB083"
Last-Modified: Fri, 24 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Sun, 26 Jun 2022 08:23:47 GMT
Date: Sun, 26 Jun 2022 07:03:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9A4C6D127F3E8F2083A588B1B6818BD65AF7810F7C768B54964E17690F0BB083"
Last-Modified: Fri, 24 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Sun, 26 Jun 2022 08:23:47 GMT
Date: Sun, 26 Jun 2022 07:03:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9A4C6D127F3E8F2083A588B1B6818BD65AF7810F7C768B54964E17690F0BB083"
Last-Modified: Fri, 24 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Sun, 26 Jun 2022 08:23:47 GMT
Date: Sun, 26 Jun 2022 07:03:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9A4C6D127F3E8F2083A588B1B6818BD65AF7810F7C768B54964E17690F0BB083"
Last-Modified: Fri, 24 Jun 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4829
Expires: Sun, 26 Jun 2022 08:23:47 GMT
Date: Sun, 26 Jun 2022 07:03:18 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F078fb16a-ed33-4dc3-8f0d-fa2af1b1a290.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 11483
x-amzn-requestid: 31728949-c166-4867-b377-2d9ac07fb6e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UTDsuEZdoAMFWIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b77fea-0ba36d817950cc271cc3e3dc;Sampled=0
x-amzn-remapped-date: Sat, 25 Jun 2022 21:36:42 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -TUpVxLspf9nL6sVtRnSSKCKJLkik7UM85tJ47P7QnTBhXSOCFDttQ==
via: 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Jun 2022 21:42:44 GMT
etag: "53b0cb739723cc34657019cde118b003970cbb86"
content-type: image/jpeg
age: 33634
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11483
Md5:    1e0d05753e633912c3b1d61427a2384e
Sha1:   53b0cb739723cc34657019cde118b003970cbb86
Sha256: f84afe24d5c52db107a9767c445709223d112ff7adccf296e0e2d79899f73310
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3e1d84a-1728-47d8-bc04-7da5b27045d9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9721
x-amzn-requestid: fab55318-719e-4e9c-8f66-fba724da75cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TychIE3yoAMFdKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62aa746d-78b50b690376a97d6772c393;Sampled=0
x-amzn-remapped-date: Thu, 16 Jun 2022 00:08:13 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: czQapidkTq5nbQwHkw6fRfHnnmdAc5yjWc1B6AiEGteeKITUhq0cUg==
via: 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Jun 2022 00:16:56 GMT
age: 24382
etag: "824c12da88732481458fc6c1a455c7382a649e3c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9721
Md5:    01fd8b5742b0e38247b34253cb075e35
Sha1:   824c12da88732481458fc6c1a455c7382a649e3c
Sha256: 00bd45c3a5866f9bb316788864b2ff8f083c5f1d00c2a3a5abdc65aaa1fea08b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F647651ae-42ca-48d8-bdf1-0814da1bec0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10193
x-amzn-requestid: 5ea36860-9bae-4ed9-8717-959d03a7f5cc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UTDrSE5GIAMFfpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b77fe1-4564e4d023aacadd7d40cabe;Sampled=0
x-amzn-remapped-date: Sat, 25 Jun 2022 21:36:33 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5Nwn6Ep1UagfkkCitcW-g9f4JDISLRRmmy4LCIYGpxkOc335xxq6Cg==
via: 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Jun 2022 21:56:20 GMT
age: 32818
etag: "52630349ca7de7409677c425b6bcca91f1e3ea28"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10193
Md5:    f46ac142adc5298b7b16af5792478268
Sha1:   52630349ca7de7409677c425b6bcca91f1e3ea28
Sha256: 97e804de502b25001ff8ebf1483b30ee5dc9782e868413cc16f42963f7da7b6b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabaa1803-535b-4153-9568-1990cb5f1a0d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 4240
x-amzn-requestid: 8ede5c3c-b53a-46fe-8f38-c15568f9e7f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UTaQWE25IAMFYHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b7a402-681d48aa5f1606d9313bbb60;Sampled=0
x-amzn-remapped-date: Sun, 26 Jun 2022 00:10:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2lMIl-oFz5AW5Apwo5eF3TctpXuExKCf-kdrllJiOrsTgJyNVN43OQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Jun 2022 00:23:45 GMT
age: 23973
etag: "5f68c0da25f1d866b8823e73851d170f97e90eba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4240
Md5:    a38f89f9b503a6f3d00ce11e669fe2a0
Sha1:   5f68c0da25f1d866b8823e73851d170f97e90eba
Sha256: 93df83541549ecc95b164e8fc4b597c5dd3efaa4f70da137d3342385f4a042e8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F27e03aa0-6f56-4baa-9f43-35d6d6056264.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7092
x-amzn-requestid: 4c72beb3-4e54-4759-b95e-34c0ccc48e9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UM0LTHUioAMFz0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b500ae-7ba2ac7c63886b3522c4d0f1;Sampled=0
x-amzn-remapped-date: Fri, 24 Jun 2022 00:09:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: spgCviBHMB7IjQhtRnnZdIqs5LUhlFzQOlG-PbM9kXGhuSivLgcbtQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 26 Jun 2022 00:44:23 GMT
age: 22735
etag: "0a7fdcf2626f74d2f61cbd1ae479d98515c54c45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7092
Md5:    381fe63973d2dba16bc8fa7f1af39341
Sha1:   0a7fdcf2626f74d2f61cbd1ae479d98515c54c45
Sha256: 5d7d0c9307a101fd643209bf62505ef64108bb04e6b781e8905e677c5b5fec21
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe924215b-63aa-4e9b-bee5-89aff1024828.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 14114
x-amzn-requestid: 2ac627d3-802f-4f6e-a6d7-932c95e8277d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UTDq3EUHoAMFiDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b77fde-552fb2ea20ba22386b0dbbb8;Sampled=0
x-amzn-remapped-date: Sat, 25 Jun 2022 21:36:31 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eUcURg_u4bYye_QtpvCgxuGMK6Ew8nDzVnoeHbjVbAII7cuGuX0CPw==
via: 1.1 f62c9ca47e35df5c65764381977823a6.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Jun 2022 21:42:21 GMT
age: 33657
etag: "b96b95b17ad1d65d044ce00bca0986d32dc22bda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14114
Md5:    3b4d47fde47da1dc95bf5fc2f5befbfb
Sha1:   b96b95b17ad1d65d044ce00bca0986d32dc22bda
Sha256: af5855dec19e57f15b3526d39567c4f54ea3513e5d3d40e039075ea1824b5081