Overview

URL https://bdaudit.ro/userfiles/file/folunogogitamuvebexu.pdf
IP89.42.218.101
ASNROMARG SRL
Location Romania
Report completed2022-06-02 09:16:48 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-06-02 2 bdaudit.ro/userfiles/file/folunogogitamuvebexu.pdf Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

URL bdaudit.ro/userfiles/file/folunogogitamuvebexu.pdf
IP  89.42.218.101
Magic PDF document, version 1.4, 2 pages\012- data
Size 77572
MD5 2f11d6b0fe879aadcde396adeb64bd2c
SHA1 b5a9bd806a0a2370f08c82bea6dd7a9a84c990f7
SHA256 945df7d7d1597f1ad795f2dbc2c06e81716b87f1127c3649d4ba131b3ba7ebbc
Analyzer Analysed Verdict Comment
VirusTotal 2021-10-08 08:01:39 15/60


Passive DNS (8)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-06-02 00:39:25 UTC 93.184.220.29
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-06-01 05:00:55 UTC 35.86.38.2
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-06-02 06:53:30 UTC 34.120.237.76
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 143.204.55.36
[Mnemonic Passive DNS] r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-06-02 04:35:31 UTC 23.36.77.32
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-06-01 04:58:12 UTC 143.204.55.25
[Mnemonic Passive DNS] bdaudit.ro (1) 0 2016-01-18 22:54:29 UTC 2022-05-20 20:33:44 UTC 89.42.218.101 Unknown ranking
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239


Recent reports on same IP/ASN/Domain

Last 4 reports on IP: 89.42.218.101

Date UQ / IDS / BL URL IP
2022-08-02 16:41:59 +0000
0 - 0 - 1 topconta.ro/userfiles/file/zelax.pdf 89.42.218.101
2022-06-21 20:21:03 +0000
0 - 0 - 1 https://bdaudit.ro/userfiles/file/folunogogit (...) 89.42.218.101
2022-06-21 17:28:48 +0000
0 - 0 - 1 https://bdaudit.topham.ro/userfiles/file/zawol.pdf 89.42.218.101
2022-06-02 09:43:01 +0000
0 - 0 - 1 https://bdaudit.ro/userfiles/file/40956446953.pdf 89.42.218.101

Last 10 reports on ASN: ROMARG SRL

Date UQ / IDS / BL URL IP
2022-08-09 13:32:26 +0000
0 - 0 - 17 farmacia-organika.ro/doc/bME/o3Y/j3S/LR3cf33.zip 89.39.83.31
2022-08-09 07:27:09 +0000
0 - 0 - 1 rdrcollect.ro/ad-sunt/documents.zip 89.42.218.226
2022-08-09 07:26:18 +0000
0 - 0 - 1 actualitatea-crestina.ro/laudantium-reiciendi (...) 89.42.218.232
2022-08-09 07:15:40 +0000
0 - 0 - 15 seinsweise.com/laborum-rerum/documents.zip 89.42.218.164
2022-08-09 07:12:26 +0000
0 - 0 - 1 louloucuisine.com/eligendi-soluta/documents.zip 89.42.218.94
2022-08-09 07:10:11 +0000
0 - 0 - 3 chop-shop.ro/maiores-repudiandae/documents.zip 89.47.242.199
2022-08-09 07:06:56 +0000
0 - 0 - 2 turismtimis.ro/a-quas/documents.zip 89.42.218.164
2022-08-09 03:11:00 +0000
0 - 0 - 19 farmacia-organika.ro/doc/bME/o3Y/j3S/LR3cf33.zip 89.39.83.31
2022-08-08 18:45:23 +0000
0 - 0 - 18 farmacia-organika.ro/doc/bME/o3Y/j3S/LR3cf33.zip 89.39.83.31
2022-08-08 16:50:36 +0000
0 - 0 - 5 acordimobiliar.ro/qui-quia/documents.zip 89.42.218.99

Last 2 reports on domain: bdaudit.ro

Date UQ / IDS / BL URL IP
2022-06-21 20:21:03 +0000
0 - 0 - 1 https://bdaudit.ro/userfiles/file/folunogogit (...) 89.42.218.101
2022-06-02 09:43:01 +0000
0 - 0 - 1 https://bdaudit.ro/userfiles/file/40956446953.pdf 89.42.218.101


JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (18)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Alert, Backoff, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 02 Jun 2022 08:36:02 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kn-2OJ_g_iFhcorHsMiAAL83w7OWyTYWW_SjBP80M_6H3XEHOMOcRg==
Age: 2433


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    c98c56ff7bc7ba547517573963f425e3
Sha1:   58c8dccc28ecd76424af6ed9988575a35cf8a0c2
Sha256: d57d9d5e87e8761ffdf790ff762307f5c823e8e8241781797373c10e076ec44e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F5BA9F3BD904C913FDCBD351A4C78F9E197AB569EA5CFD75E16DE87E451CDBD4"
Last-Modified: Wed, 01 Jun 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7197
Expires: Thu, 02 Jun 2022 11:16:32 GMT
Date: Thu, 02 Jun 2022 09:16:35 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.25
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Wed, 11 May 2022 19:51:39 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Jun 2022 02:02:41 GMT
etag: "48ca0beea419a9039591cf1aee5179e0"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YJWLEpgBTqweROnElvP6KLiLPu-syMJSs4CotPL3mpTZOJzh47Hfjw==
age: 26034
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    48ca0beea419a9039591cf1aee5179e0
Sha1:   9e92629f505fcc07aab51221e8fe62197a23e307
Sha256: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
                                        
                                            GET /userfiles/file/folunogogitamuvebexu.pdf HTTP/1.1 
Host: bdaudit.ro
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         89.42.218.101
HTTP/2 200 OK
                                        
content-type: application/pdf
last-modified: Thu, 09 Sep 2021 02:17:03 GMT
accept-ranges: bytes
content-length: 77572
date: Thu, 02 Jun 2022 09:16:34 GMT
server: LiteSpeed
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PDF document, version 1.4, 2 pages\012- data
Size:   77572
Md5:    2f11d6b0fe879aadcde396adeb64bd2c
Sha1:   b5a9bd806a0a2370f08c82bea6dd7a9a84c990f7
Sha256: 945df7d7d1597f1ad795f2dbc2c06e81716b87f1127c3649d4ba131b3ba7ebbc

Alerts:
  Blocklists:
    - fortinet: Phishing
  File Analyzers:
    - virustotal: 15/60
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 02 Jun 2022 09:16:35 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Alert, Backoff, Last-Modified, ETag, Cache-Control, Expires, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 02 Jun 2022 09:13:25 GMT
Cache-Control: max-age=3600
Expires: Thu, 02 Jun 2022 09:15:48 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EzwpLmnlllzN2ZxA0YOgx2xuH3oLYpY8LIMCpR1E6SK4pZpMtrVwXA==
Age: 191


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3099
Cache-Control: 'max-age=158059'
Date: Thu, 02 Jun 2022 09:16:37 GMT
Last-Modified: Thu, 02 Jun 2022 08:24:58 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UHOY0yHEl/TqKapDlistJQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.86.38.2
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 326l1x9Uh1siEO7Ttl6ND6uVqLg=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7F7EB438D5A68A9CDFEB83E3E69AC81C88A29F8A61E768E6DFA0E1ABCBCC089"
Last-Modified: Wed, 01 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14354
Expires: Thu, 02 Jun 2022 13:15:52 GMT
Date: Thu, 02 Jun 2022 09:16:38 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7F7EB438D5A68A9CDFEB83E3E69AC81C88A29F8A61E768E6DFA0E1ABCBCC089"
Last-Modified: Wed, 01 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14354
Expires: Thu, 02 Jun 2022 13:15:52 GMT
Date: Thu, 02 Jun 2022 09:16:38 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7F7EB438D5A68A9CDFEB83E3E69AC81C88A29F8A61E768E6DFA0E1ABCBCC089"
Last-Modified: Wed, 01 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14354
Expires: Thu, 02 Jun 2022 13:15:52 GMT
Date: Thu, 02 Jun 2022 09:16:38 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7F7EB438D5A68A9CDFEB83E3E69AC81C88A29F8A61E768E6DFA0E1ABCBCC089"
Last-Modified: Wed, 01 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14354
Expires: Thu, 02 Jun 2022 13:15:52 GMT
Date: Thu, 02 Jun 2022 09:16:38 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c39055c-9d2a-4bbc-8ceb-b421f92dd916.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6155
x-amzn-requestid: 6b6d3044-b5bf-4da8-a855-402624bfe08f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TETuAFtwoAMFjiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6297fff3-443cfeab260ac0b37a0eb660;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:10:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4DnaZh9MOs9c16y6ZtKnRw87qLKGNUhj1QVoGkplcMR6Pkt3D6rrvw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:35:54 GMT
etag: "b586ab3880efb8bf8561dd5909d82902ac6f3330"
content-type: image/jpeg
age: 31244
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6155
Md5:    2b5c96e15d26ecee12ce71490b69af61
Sha1:   b586ab3880efb8bf8561dd5909d82902ac6f3330
Sha256: 0684d000045cdd5cc85fcf60004f050c582bd2cda64d64dc9f66a5fa5bc918e1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8dd04e4-df21-4838-9dd0-30107e2e9ba8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8817
x-amzn-requestid: 9f5b7ba6-e343-44ee-ab9e-6695ba456f68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TESgHEH9IAMFjVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6297fe00-196ee0b51e4457e02289c66a;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:02:08 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gOrgL15i8QQaZ9pgG55lxaSzTIio0u4wgyYlTxCTmef-t67adUw6pw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:35:44 GMT
age: 31254
etag: "f62809e40132bb68e5e29dbc8babaf4bd1da4132"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8817
Md5:    2122d813af7e8f938dcec9ad9b34f685
Sha1:   f62809e40132bb68e5e29dbc8babaf4bd1da4132
Sha256: de5463f5dc1f15a55b624c8769498e4df4c182334b35066882817756d530e40b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F914f8f9e-9935-4a6f-a2b3-90bbc420b338.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9027
x-amzn-requestid: 515b196d-2e61-4789-b0d0-b7d650e4f12c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: SmoCWFvZIAMF1aQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-628c2075-0091929e4a3c47374e9ebdb1;Sampled=0
x-amzn-remapped-date: Tue, 24 May 2022 00:01:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eLU9ZqeZdrL4J1L1Nhp0IEEkiQxbfg1NXOkH2clp9Dc7Ws6UvsfkSg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 04:43:18 GMT
age: 16400
etag: "ffe93ceaf3f0648f980a05a3c03a94f5dcabb953"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9027
Md5:    429958a10401f23192ee882b2abef8f0
Sha1:   ffe93ceaf3f0648f980a05a3c03a94f5dcabb953
Sha256: bef39d8d28d751d6e6aced70bf4b4104b2bec3e83cf8a1248ae2074741eccfd8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3bc8257-1fee-4252-aa84-5ebcf214b6cd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 11106
x-amzn-requestid: 5eb5757f-af93-4399-b8c3-e62a4150160a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TETuBHbYoAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6297fff3-34eec4c62a97ad765f70c476;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:10:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Jz6Sgqi34tu52MqM2_n1ZnlwtgHlqyTWr352LCACxTH-h1WEtjstRQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:35:54 GMT
etag: "c05b1dba971264c1a0939e4d09732b9970ade34f"
content-type: image/jpeg
age: 31244
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11106
Md5:    b1806938afbe1862027c73fc1cfb6023
Sha1:   c05b1dba971264c1a0939e4d09732b9970ade34f
Sha256: 29fd67fb3b4dc27d8ae7e905f12428e50b15f7193dc4a5c498031ab355e96bf6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f9921e4-fdf3-49c6-8cff-c94d14fc63fe.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7993
x-amzn-requestid: 543a629d-f27e-46c9-9d05-07794da710b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TEUZwHGBIAMFTGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6298010b-4aea547833899a207aa08c51;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:15:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0R5gUJFGmhuayoECLieYFwskJq6B2w0iO_fn91_fsRl0KoDI-SE0cQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:35:42 GMT
age: 31256
etag: "9142e5a63fa14c86f78cb26d3954db8cbee1e800"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7993
Md5:    44f48b4f88ace776e1eb203c1e68edbf
Sha1:   9142e5a63fa14c86f78cb26d3954db8cbee1e800
Sha256: 7a4e75feda3048fd668452c6b88d813eaa2d2cc43e84b3a4a93568882ab1b65f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90a43bd6-8c33-4ac5-8370-cb46737157aa.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 11198
x-amzn-requestid: f15d2773-c848-4d68-ad6d-f93bf810f72a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: TESgFFGnoAMF82Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6297fe00-2af6b1ba5ae7682b41a9273b;Sampled=0
x-amzn-remapped-date: Thu, 02 Jun 2022 00:02:08 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: si5QZsSx1MBHd59UTVV1O3A8SxKGjl1Pe6Ud0cTknWuVoIXYLom8gw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Jun 2022 00:34:03 GMT
age: 31355
etag: "349aca58f3d48baa253717275358319151cb7b2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11198
Md5:    f7b5ae59e4c753338476fe67554a054e
Sha1:   349aca58f3d48baa253717275358319151cb7b2e
Sha256: 87bfc2f2ca7ba12c7e0dcaf48d2401f24d2c5aba4c8ae3c2f939fe111674a1e7