Overview

URL coverybox.box8websites.com/ckfinder/userfiles/files/zilewurukutidux.pdf
IP45.56.108.238
ASNLinode, LLC
Location United States
Report completed2022-06-02 18:10:00 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-06-02 2 coverybox.box8websites.com/ckfinder/userfiles/files/zilewurukutidux.pdf Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

URL coverybox.box8websites.com/ckfinder/userfiles/files/zilewurukutidux.pdf
IP  45.56.108.238
Magic PDF document, version 1.4, 3 pages\012- data
Size 85736
MD5 214fee84b08d237bd1ea217d027ec69d
SHA1 bb53c5842603767d1c0dc25c57ec5fbb4fb3ce82
SHA256 40b93da85aedcde90493d332e26857feab6c1f5d5654f3dfb0df4b7bfac898be
Analyzer Analysed Verdict Comment
VirusTotal 2022-01-26 00:35:15 26/61


Passive DNS (8)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-06-02 04:47:03 UTC 35.161.100.107
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-06-02 06:53:30 UTC 34.120.237.76
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 143.204.55.36
[Mnemonic Passive DNS] r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-06-02 04:35:31 UTC 23.36.76.226
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-06-02 04:47:03 UTC 143.204.55.25
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] coverybox.box8websites.com (2) 0 No data No data 45.56.108.238 Unknown ranking
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-06-02 11:46:29 UTC 93.184.220.29


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 45.56.108.238

Date UQ / IDS / BL URL IP
2022-07-02 01:46:07 +0000
0 - 0 - 1 99hospitalitygroup.com/ckfinder/userfiles/files/ 45.56.108.238
2022-06-29 20:56:43 +0000
0 - 0 - 1 sweatrinserepeat.com/ckfinder/userfiles/files (...) 45.56.108.238
2022-06-29 05:26:13 +0000
0 - 0 - 1 sweatrinserepeat.com/ckfinder/userfiles/files (...) 45.56.108.238
2022-06-28 19:10:26 +0000
0 - 0 - 1 sweatrinserepeat.com/ckfinder/userfiles/files (...) 45.56.108.238
2022-06-26 12:34:58 +0000
0 - 0 - 1 bodybybodyology.com/ckfinder/userfiles/files/ (...) 45.56.108.238
2022-06-24 17:16:03 +0000
0 - 0 - 1 skipjackpoke.com/ckfinder/userfiles/files/385 (...) 45.56.108.238
2022-06-24 00:09:09 +0000
0 - 0 - 1 embody.box8websites.com/ckfinder/userfiles/fi (...) 45.56.108.238
2022-06-23 09:03:07 +0000
0 - 0 - 2 chipublichouse.com/ckfinder/userfiles/files/3 (...) 45.56.108.238
2022-06-23 05:46:04 +0000
0 - 0 - 1 embody.box8websites.com/ckfinder/userfiles/fi (...) 45.56.108.238
2022-06-21 09:16:06 +0000
0 - 0 - 1 ckrestaurantgroup.com/ckfinder/userfiles/file (...) 45.56.108.238

Last 10 reports on ASN: Linode, LLC

Date UQ / IDS / BL URL IP
2022-08-12 23:54:49 +0000
0 - 0 - 3 callforsex.com/ 45.79.19.196
2022-08-12 23:49:35 +0000
0 - 0 - 2 comicbookcovers.com/mtm/direct/.eJxtikEOwjAMB (...) 45.33.18.44
2022-08-12 23:49:10 +0000
0 - 0 - 2 mmmz.com/ 96.126.123.244
2022-08-12 23:48:58 +0000
0 - 0 - 3 redtube56.info/ 72.14.185.43
2022-08-12 23:41:50 +0000
0 - 0 - 2 go-porno.com/mtm/direct/.eJxdikEOwjAMBP_iYwk1 (...) 173.255.194.134
2022-08-12 23:16:00 +0000
0 - 0 - 2 wegetyouamortgage.co.uk/mtm/direct/.eJx1ykEOA (...) 45.33.20.235
2022-08-12 23:05:18 +0000
0 - 0 - 2 teensonline.com/mtm/direct/.eJxlikEOwjAMBP_iY (...) 45.33.2.79
2022-08-12 23:05:02 +0000
0 - 0 - 2 datingsexygirl.com/se/3q/ 23.239.2.149
2022-08-12 22:59:56 +0000
0 - 0 - 3 kroshki.com/ 45.33.2.79
2022-08-12 22:54:22 +0000
0 - 0 - 3 mail.rubecca.in/ 198.58.118.167

No other reports on domain: box8websites.com



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (18)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Alert, Backoff, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 02 Jun 2022 17:36:06 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: x9stSSZJBMLHjLqBubQPdWh_1cpPsGRMgsnc8AIT9IYA3BSSVrbMYA==
Age: 2021


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    c98c56ff7bc7ba547517573963f425e3
Sha1:   58c8dccc28ecd76424af6ed9988575a35cf8a0c2
Sha256: d57d9d5e87e8761ffdf790ff762307f5c823e8e8241781797373c10e076ec44e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F5BA9F3BD904C913FDCBD351A4C78F9E197AB569EA5CFD75E16DE87E451CDBD4"
Last-Modified: Wed, 01 Jun 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2552
Expires: Thu, 02 Jun 2022 18:52:19 GMT
Date: Thu, 02 Jun 2022 18:09:47 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.25
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Wed, 11 May 2022 19:51:39 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Jun 2022 02:02:41 GMT
etag: "48ca0beea419a9039591cf1aee5179e0"
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: giD5WE1rJR1Le9XbclwpTZj03GKNZYpw1tncAUAY_UDKyT5NQsQHUQ==
age: 58026
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    48ca0beea419a9039591cf1aee5179e0
Sha1:   9e92629f505fcc07aab51221e8fe62197a23e307
Sha256: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 02 Jun 2022 18:09:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ckfinder/userfiles/files/zilewurukutidux.pdf HTTP/1.1 
Host: coverybox.box8websites.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         45.56.108.238
HTTP/1.1 200 OK
Content-Type: application/pdf
                                        
Date: Thu, 02 Jun 2022 18:09:47 GMT
Server: Apache
Last-Modified: Wed, 13 Oct 2021 03:00:33 GMT
Accept-Ranges: bytes
Content-Length: 85736
Cache-Control: max-age=2592000
Expires: Sat, 02 Jul 2022 18:09:47 GMT
X-Content-Type-Options: nosniff
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PDF document, version 1.4, 3 pages\012- data
Size:   85736
Md5:    214fee84b08d237bd1ea217d027ec69d
Sha1:   bb53c5842603767d1c0dc25c57ec5fbb4fb3ce82
Sha256: 40b93da85aedcde90493d332e26857feab6c1f5d5654f3dfb0df4b7bfac898be

Alerts:
  Blocklists:
    - fortinet: Phishing
  File Analyzers:
    - virustotal: 26/61
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: coverybox.box8websites.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://coverybox.box8websites.com/

                                         
                                         45.56.108.238
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Thu, 02 Jun 2022 18:09:47 GMT
Server: Apache
Last-Modified: Thu, 23 Apr 2015 22:36:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=604800
Expires: Thu, 09 Jun 2022 18:09:47 GMT
X-Content-Type-Options: nosniff
Content-Length: 4107
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 24 bits/pixel\012- data
Size:   4107
Md5:    88ed860524f26103ddccef80a550e48f
Sha1:   689ceea4bc310a1477c1b6766a2073d82d498b4f
Sha256: c2afb8a81ddfa87774b2da0c1f7adf321daff9329125cd0b4dafde9a80e7409d
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Alert, Backoff, Last-Modified, ETag, Cache-Control, Expires, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 02 Jun 2022 17:13:25 GMT
Cache-Control: max-age=3600
Expires: Thu, 02 Jun 2022 17:51:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jZig_iluEleF5uplss8ySSHnEQqljtTY6481wgLMBOMBgIaJk8u6yQ==
Age: 3383


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2118
Cache-Control: 'max-age=158059'
Date: Thu, 02 Jun 2022 18:09:48 GMT
Last-Modified: Thu, 02 Jun 2022 17:34:30 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: o382I8Y4iwfcBshpgKbaaA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.161.100.107
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KW7d/JBrw/7U3URyBDV60QScJdQ=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7F7EB438D5A68A9CDFEB83E3E69AC81C88A29F8A61E768E6DFA0E1ABCBCC089"
Last-Modified: Wed, 01 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2550
Expires: Thu, 02 Jun 2022 18:52:20 GMT
Date: Thu, 02 Jun 2022 18:09:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7F7EB438D5A68A9CDFEB83E3E69AC81C88A29F8A61E768E6DFA0E1ABCBCC089"
Last-Modified: Wed, 01 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2550
Expires: Thu, 02 Jun 2022 18:52:20 GMT
Date: Thu, 02 Jun 2022 18:09:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7F7EB438D5A68A9CDFEB83E3E69AC81C88A29F8A61E768E6DFA0E1ABCBCC089"
Last-Modified: Wed, 01 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2550
Expires: Thu, 02 Jun 2022 18:52:20 GMT
Date: Thu, 02 Jun 2022 18:09:50 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c39055c-9d2a-4bbc-8ceb-b421f92dd916.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6155
x-amzn-requestid: 34ddf3fa-e108-4fda-b9e0-ea4d67f8c521
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TEUZwEiBoAMFRlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6298010b-385b00e9566b3f5e7bb5c757;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:15:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DjRzSa6zLogYXKqTfosbdEUajR8kbfSp0BKaB1gkkuZ_LdzBsnmsag==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:40:46 GMT
etag: "b586ab3880efb8bf8561dd5909d82902ac6f3330"
content-type: image/jpeg
age: 62944
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6155
Md5:    2b5c96e15d26ecee12ce71490b69af61
Sha1:   b586ab3880efb8bf8561dd5909d82902ac6f3330
Sha256: 0684d000045cdd5cc85fcf60004f050c582bd2cda64d64dc9f66a5fa5bc918e1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c86ed85-e12c-4c7c-bc98-c6748a45b5e0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8710
x-amzn-requestid: 74ed1c1c-4ec4-4806-a506-6a341aace4f2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TET15F1ioAMFnNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62980025-2967ebd60d4865a02e962059;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:11:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: aID-U-RETzNbSDQv9Mo7kSbvFQSVyk_P9n1U9O3LEwV8mDlDdAzcLw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:41:01 GMT
etag: "ad22ccf9bb0f42bce3181d0931c90f7ed3057eb7"
content-type: image/jpeg
age: 62929
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8710
Md5:    a059e50803f7e7bbf2f60ea1b1fdf69d
Sha1:   ad22ccf9bb0f42bce3181d0931c90f7ed3057eb7
Sha256: 9afb4148f4329e9f8c3490e96c8fa499875d6b0ab65313f0656c7cb22ba42730
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73d02368-4358-4b5b-8018-98e41198b7d1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 4843
x-amzn-requestid: 600a17ed-b96e-44e6-9591-f8d47d15d424
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TBADEGgqoAMFjLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6296ad46-5b28e6d00e8fd1d4745863fb;Sampled=0
x-amzn-remapped-date: Wed, 01 Jun 2022 00:05:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FerKrXgoUfsah1-eekSQaDO7IWiGA6JNNZE3UUqaQu5puvovSUqrgQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:24:45 GMT
age: 63905
etag: "0ce0a6f31cd6dbdb0fd77a0b3d08ccd923cf7f04"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4843
Md5:    30f49f1db4905ab438118160512208ef
Sha1:   0ce0a6f31cd6dbdb0fd77a0b3d08ccd923cf7f04
Sha256: 59abd701dbb975723529f68d7d5b55e50fa9f3bd0d5193597662c5994b11fb03
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F874ce85e-7786-4e92-aea7-1c22181143e6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9108
x-amzn-requestid: 6ed5cdc2-af09-48c6-9fca-b029f3dc7c6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TBAuOHjFIAMFttQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6296ae5a-54a22abe5a5313a87c85b9f1;Sampled=0
x-amzn-remapped-date: Wed, 01 Jun 2022 00:10:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Q50gFSYBQLj_aFj0r1ARMy70oLDWiUb7aF2i6QHsW5kxiK9u0XHsTQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 04:49:40 GMT
age: 48010
etag: "a91f474e6d320797c2ea32ecaf7a341f5f77fe82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9108
Md5:    389fe7dd5f3f80351a97fe4106be49b5
Sha1:   a91f474e6d320797c2ea32ecaf7a341f5f77fe82
Sha256: 11957edbfb3dc06abbe8ee6aa9dac0a25f84ba909a6404030c9f081343384513
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5637c512-a1cf-47d8-9f66-d7e691c93512.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 12372
x-amzn-requestid: 0fbf2214-c122-4bb0-83d1-06e4e8fb1ddd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TEUZxHHEIAMF0pA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6298010b-74cbcdb06e0dfa9433b89be7;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:15:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: INpZP_PZVH0Z1O5FvyOCE7FaN3By2mVDO1MV-8epHYvo7r7sXwMLPg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:37:25 GMT
age: 63145
etag: "6d8e08c433727d4da05623fbb44ebead2721317f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12372
Md5:    45f738524dc6d43487997bd0a2b9ec9e
Sha1:   6d8e08c433727d4da05623fbb44ebead2721317f
Sha256: 8bad1ed99a0ed38e8ab60238bc020a880b96d5ab27be69f03e30aba27adfb03c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8dd04e4-df21-4838-9dd0-30107e2e9ba8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8817
x-amzn-requestid: 9f5b7ba6-e343-44ee-ab9e-6695ba456f68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TESgHEH9IAMFjVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6297fe00-196ee0b51e4457e02289c66a;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:02:08 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZV66Gu8ZmuHKIAlnRhLyFMStIcc9jJ8v4OuPxs_0rpsBbThkg4iDzg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:40:59 GMT
age: 62931
etag: "f62809e40132bb68e5e29dbc8babaf4bd1da4132"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8817
Md5:    2122d813af7e8f938dcec9ad9b34f685
Sha1:   f62809e40132bb68e5e29dbc8babaf4bd1da4132
Sha256: de5463f5dc1f15a55b624c8769498e4df4c182334b35066882817756d530e40b