Overview

URLlana.staff.gunadarma.ac.id/Downloads/files/37220/(excel)Analisis-Rasio.xls
IP 202.125.94.80 (Indonesia)
ASN#46042 Gunadarma University
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2023-02-18 06:35:44 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (7)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (8) 344 2020-12-02T09:52:13Z 2023-03-13T05:09:07Z 2704 7088 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-13T05:09:10Z 782 2374 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-13T05:09:35Z 413 5882 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-13T05:09:13Z 333 391 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-13T05:09:14Z 606 127 35.165.197.103
lana.staff.gunadarma.ac.id (1) 0 2016-02-14T15:10:12Z 2022-11-07T12:04:40Z 405 243464 202.125.94.80
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-13T05:09:16Z 3246 61198 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-02-18 06:35:33 UTC medium  202.125.94.80 Client IP ET HUNTING SUSPICIOUS Possible Office Doc with Embedded VBA Project (Wide) 
2023-02-18 06:35:34 UTC high  202.125.94.80 Client IP ETPRO WEB_CLIENT Microsoft Excel Malformed Selection (type 0x1D) BIFF record 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

URL lana.staff.gunadarma.ac.id/Downloads/files/37220/(excel)Analisis-Rasio.xls
IP  202.125.94.80
Magic Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Title: Ratio Analysis-Detailed, Author: JaxWorks, Comments: Copyright, 2010, Jaxworks, All Rights Reserved., Last Saved By: Frank Vickers, Name of Creating Application: Microsoft Excel, Last Printed: Thu Feb 4 10:50:03 2010, Create Time/Date: Sat Nov 27 14:59:45 1999, Last Saved Time/Date: Thu Feb 4 11:15:32 2010, Security: 0\012- OLE 2 Compound Document, v3.62, SecID 0x1, 4 FAT sectors, Mini FAT start sector 0x146, 4 Mini FAT sectors : Microsoft Excel 97-2003 addin\012- data
Size 243200
MD5 9b69495dab7b6fc50a7d5556300327bf
SHA1 f1a7f5820341c6ce0acb5c5268bd92d5fdfdc18c
SHA256 304b3f57aefbe0dfed51b2a0c86560f57904bfef5c3bd184bd6076d824c6278c
Analyzer Scan Date Verdict Comment

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 202.125.94.80
Date UQ / IDS / BL URL IP
2023-02-18 06:35:44 UTC 0 - 2 - 0 lana.staff.gunadarma.ac.id/Downloads/files/37 (...) 202.125.94.80


Last 5 reports on ASN: Gunadarma University
Date UQ / IDS / BL URL IP
2023-03-30 03:50:34 UTC 0 - 1 - 41 202.125.94.212/ 202.125.94.212
2023-02-18 06:35:44 UTC 0 - 2 - 0 lana.staff.gunadarma.ac.id/Downloads/files/37 (...) 202.125.94.80
2023-01-05 10:18:42 UTC 0 - 0 - 1 fikti.bem.gunadarma.ac.id/SDM/qNeMUe2RvxdvuRlf/ 202.125.94.186
2023-01-05 10:01:14 UTC 0 - 0 - 1 fikti.bem.gunadarma.ac.id/SDM/wC256Xn/ 202.125.94.186
2023-01-05 09:53:49 UTC 0 - 0 - 1 fikti.bem.gunadarma.ac.id/SDM/xDYmcOngg/ 202.125.94.186


Last 5 reports on domain: gunadarma.ac.id
Date UQ / IDS / BL URL IP
2022-09-16 23:26:22 UTC 0 - 0 - 1 fikti.bem.gunadarma.ac.id/monon/LGb0yCzz/ 118.98.72.14
2022-09-16 22:04:16 UTC 0 - 0 - 1 fikti.bem.gunadarma.ac.id/SDM/wC256Xn/ 118.98.72.14
2022-09-16 21:47:50 UTC 0 - 0 - 1 fikti.bem.gunadarma.ac.id/SDM/YH8OJ1Zz8miBX/ 118.98.72.14
2022-09-04 18:02:27 UTC 0 - 0 - 1 fikti.bem.gunadarma.ac.id/monon/LGb0yCzz/ 118.98.72.14
2022-09-04 18:00:17 UTC 0 - 0 - 1 fikti.bem.gunadarma.ac.id/monon/OAH7XngpmWiT1 (...) 118.98.72.14


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-04 20:10:24 UTC 0 - 1 - 1 download.pdf00.com/pc/cadconverter/CADConvert (...) 211.93.212.206
2023-04-04 20:10:12 UTC 0 - 1 - 1 download.pdf00.com/pc/cadconverter/CADConvert (...) 211.93.212.206
2023-04-04 20:10:37 UTC 0 - 1 - 1 download.pdf00.com/pc/fyaudio/AudioEditor_ae1 (...) 211.93.212.206
2023-04-04 19:26:19 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/10315243821552 (...) 162.159.133.233
2023-04-04 17:48:41 UTC 0 - 1 - 0 dw31.malavida.com/dwn/5408335f745b049c93e4d7b (...) 5.145.168.45

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (20)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "FF8709095D9B5A7D90FF10B31A6A9D2E071B42E215641D30DCE6DE6A782BFFD6"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2799
Expires: Sat, 18 Feb 2023 07:22:12 GMT
Date: Sat, 18 Feb 2023 06:35:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "DDFA83AFE45B77B508119AC50488A73C3C49A78FA7A64AD983BD4958E0C7A4F9"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9305
Expires: Sat, 18 Feb 2023 09:10:38 GMT
Date: Sat, 18 Feb 2023 06:35:33 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 18 Feb 2023 05:37:45 GMT
age: 3468
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    b44c4b5daa307a355e7bab1c83c1ca82
Sha1:   dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
Sha256: fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D82A876BA46480F2CAA20E2112941BFB461BDB03E882949B347ABB9E8006705F"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3059
Expires: Sat, 18 Feb 2023 07:26:32 GMT
Date: Sat, 18 Feb 2023 06:35:33 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: 68zwilsfzM6jICuKr+gChkz/ExeuS78PbjFzVD5tt2QmYTZ8rzZOMEgqyOVjv7TZdTRe3deUR+s=
x-amz-request-id: 18S7B2X6FC4F97R1
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Sat, 18 Feb 2023 05:50:24 GMT
age: 2709
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-length: 5348
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e76071a28ee566dababb3834f46d68ed
Sha1:   aebb4e68c1ba2de0f90025283e8ed8470944fde0
Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 18 Feb 2023 06:35:33 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, Alert, Content-Length, Backoff, ETag, Cache-Control, Retry-After, Last-Modified, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 18 Feb 2023 05:51:23 GMT
age: 2651
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96149E604AD1E11AB2B100B60E4605B7213F215B0A788506185DEF01954CB70F"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2284
Expires: Sat, 18 Feb 2023 07:13:38 GMT
Date: Sat, 18 Feb 2023 06:35:34 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dFarlwtDT5zV95R2B0lmAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.165.197.103
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YcJNJ/WYfmDe8SZ/5s2IIZygAoc=

                                        
                                            GET /Downloads/files/37220/(excel)Analisis-Rasio.xls HTTP/1.1 
Host: lana.staff.gunadarma.ac.id
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             202.125.94.80
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                            
Server: nginx/1.1.9
Date: Sat, 18 Feb 2023 13:34:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.2.17
Content-Disposition: attachment; filename="(excel)Analisis-Rasio.xls"


--- Additional Info ---
Magic:  Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Title: Ratio Analysis-Detailed, Author: JaxWorks, Comments: Copyright, 2010, Jaxworks, All Rights Reserved., Last Saved By: Frank Vickers, Name of Creating Application: Microsoft Excel, Last Printed: Thu Feb 4 10:50:03 2010, Create Time/Date: Sat Nov 27 14:59:45 1999, Last Saved Time/Date: Thu Feb 4 11:15:32 2010, Security: 0\012- OLE 2 Compound Document, v3.62, SecID 0x1, 4 FAT sectors, Mini FAT start sector 0x146, 4 Mini FAT sectors : Microsoft Excel 97-2003 addin\012- data
Size:   243200
Md5:    9b69495dab7b6fc50a7d5556300327bf
Sha1:   f1a7f5820341c6ce0acb5c5268bd92d5fdfdc18c
Sha256: 304b3f57aefbe0dfed51b2a0c86560f57904bfef5c3bd184bd6076d824c6278c

IDS:
  - ET HUNTING SUSPICIOUS Possible Office Doc with Embedded VBA Project (Wide)
  - ETPRO WEB_CLIENT Microsoft Excel Malformed Selection (type 0x1D) BIFF record
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5105
Expires: Sat, 18 Feb 2023 08:00:41 GMT
Date: Sat, 18 Feb 2023 06:35:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5105
Expires: Sat, 18 Feb 2023 08:00:41 GMT
Date: Sat, 18 Feb 2023 06:35:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5105
Expires: Sat, 18 Feb 2023 08:00:41 GMT
Date: Sat, 18 Feb 2023 06:35:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5105
Expires: Sat, 18 Feb 2023 08:00:41 GMT
Date: Sat, 18 Feb 2023 06:35:36 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3b95fd0-70b7-4757-9068-83472c90622c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12032
x-amzn-requestid: 1be7b95f-1088-4e2a-ba74-bba8a5c3b615
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AMZ_gHE7oAMFfkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e809fc-65057649605a732b64098657;Sampled=0
x-amzn-remapped-date: Sat, 11 Feb 2023 21:34:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3wc9cOb6EBcYrHuQPvVx1h8f0xSef25washUegMtRo7oeLosn4RlYg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Feb 2023 18:23:06 GMT
age: 43950
etag: "8fac706269ae3ec4a9f60a64f6b08066e9eeb22a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12032
Md5:    dd9dfc91c131903f04b22bca2ea07569
Sha1:   8fac706269ae3ec4a9f60a64f6b08066e9eeb22a
Sha256: d72e6a45a42dd6f6d39bdf2a68837a2fdd73b9df6e01a29dd173725b3d88e97e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b480279-2590-4382-81b1-24b027e07e23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11525
x-amzn-requestid: 6976315f-a5c5-4268-ba27-ee4407b86407
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AgMITFBioAMFweg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eff3ce-0b750d8e643e823042d5cf88;Sampled=0
x-amzn-remapped-date: Fri, 17 Feb 2023 21:38:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: klbTkdAZ65NP8L84NTsLd-fnxt0rzUa_gqtFp4gkRqzbl4rCaG0JJg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Feb 2023 21:52:10 GMT
age: 31406
etag: "4d27074ad95bd4bde2fb79f4b2ecb11434b3c8c8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11525
Md5:    e69d793b99a3580240403d04ac2aa684
Sha1:   4d27074ad95bd4bde2fb79f4b2ecb11434b3c8c8
Sha256: 3ead4940dbccbae1663545f603abf717d3e27726469bbf6939a18cd9c74bbc8b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdea703f-d6ac-448d-827b-d25d600fd916.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6874
x-amzn-requestid: 8738d017-b3c3-4964-ac98-0e07ef49e093
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AeMRNHy8IAMFRwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ef273a-718e18686ddad7ca0dfcd9d7;Sampled=0
x-amzn-remapped-date: Fri, 17 Feb 2023 07:05:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mn7hB1i08RJwgcSEYgIySMSHtGchEq5dpV3Ivb3ZVL1YgJOc8Nb_Gg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Feb 2023 07:17:17 GMT
age: 83899
etag: "280299a36f6454bb41e3fad1a438f4912ec94a0a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6874
Md5:    71e8495d20a128664c02b64c6dd651cf
Sha1:   280299a36f6454bb41e3fad1a438f4912ec94a0a
Sha256: 8c97dca8502957e65f9cb95834c21a499e01bf273fc3407d77620c1ab73f2de8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fff29f281-4000-4965-b3c0-745febea479f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6879
x-amzn-requestid: 816b94ae-dbce-4ba9-8beb-3ac7a4b41bee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AgLzQFqWoAMFmew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eff347-40fd69e9343372691404607d;Sampled=0
x-amzn-remapped-date: Fri, 17 Feb 2023 21:36:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WsZazXsh_CaHoX8HuAr1Lc4u3P--KiNKYAwWgDVeH6yXu18-WLDKwQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Feb 2023 21:50:33 GMT
age: 31503
etag: "bf720ad2fb84d016bd51124092eacca3797b9dc2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6879
Md5:    abf3a0d5921eeb113f09e80212c1f534
Sha1:   bf720ad2fb84d016bd51124092eacca3797b9dc2
Sha256: af836eb2a190133212b61b46b42d9f8949a152a267a2b76765132e0e6e93fbce
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2cebb2f-e68e-4ae8-9d99-381a61d8c52d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9564
x-amzn-requestid: c1fcaa5e-0356-4d8f-a5a7-b6f966849ada
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AgLzQFqlIAMFTwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63eff347-76f70d271229dbbc16d8f514;Sampled=0
x-amzn-remapped-date: Fri, 17 Feb 2023 21:36:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mV3BoT5sPmT_A1b4ZjH4TarJsIwxCKB1ukT9LJEE_qBFDUGwWuGZaA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Feb 2023 21:50:05 GMT
age: 31531
etag: "dd4e02327adba4d7e911f0dd506ec9a58a08f31d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9564
Md5:    c4bdebb6d2db3d5afedcb30348f3ea9a
Sha1:   dd4e02327adba4d7e911f0dd506ec9a58a08f31d
Sha256: 1146ee679da43d6466b8b0d27ffccec0bf15bf1312825a6eee841ba9b2526eff
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F870053ab-05b9-4b48-91f3-1dd38adbf7a6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7954
x-amzn-requestid: 4a58cccc-de88-46f4-a80e-20c72d070056
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AeMRLHLsoAMFbWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ef273a-28112658799b533665a9a533;Sampled=0
x-amzn-remapped-date: Fri, 17 Feb 2023 07:05:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YxdeADpbqPUzFzI-3RWAXr0P97AXfc0dJwhnvMwMUgPu_fJTusoRbw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Feb 2023 07:28:00 GMT
age: 83256
etag: "520ca2eda2dd7405a2bd68d3410289d9d44b7b8a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7954
Md5:    883519c41dacdc8fe0646ee3acd970d9
Sha1:   520ca2eda2dd7405a2bd68d3410289d9d44b7b8a
Sha256: 15702d3437ab0a0fe4f82235a9165b11198874cbdfff99cfabb95336cc988f3b