Overview

URL mabusgswuiw.herokuapp.com/
IP3.219.96.23
ASNAMAZON-AES
Location United States
Report completed2022-09-28 06:31:36 UTC
StatusLoading report..
urlquery Alerts Phishing - Microsoft Services


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
2022-09-27 2 mabusgswuiw.herokuapp.com/ Office365
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-28 2 mabusgswuiw.herokuapp.com/ Phishing
2022-09-28 2 mabusgswuiw.herokuapp.com/modal.js Phishing
2022-09-28 2 mabusgswuiw.herokuapp.com/img/d5c7b5b8b5ce6484ba8871ba798c13cc1e73b078.jpeg Phishing
2022-09-28 2 mabusgswuiw.herokuapp.com/img/e9c4a10389fbaa3cd4c25a5d00dfae6060549f58.jpeg Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (8)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-28 04:06:48 UTC 23.36.76.226
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-27 05:14:54 UTC 143.204.55.49
mnemonic passive DNS mabusgswuiw.herokuapp.com (18) 0 2022-09-27 18:09:58 UTC 2022-09-28 03:35:53 UTC 23.22.52.7 Unknown ranking
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-27 04:52:33 UTC 34.117.237.239
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-28 04:19:13 UTC 93.184.220.29
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-27 05:14:54 UTC 44.242.3.166
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-27 13:22:33 UTC 34.120.237.76
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-28 05:04:09 UTC 143.204.55.115


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.219.96.23

Date UQ / IDS / BL URL IP
2022-12-05 16:57:39 +0000
0 - 0 - 3 fsblink8.herokuapp.com/1221015/ares_casino_45 (...) 3.219.96.23
2022-11-29 14:21:10 +0000
0 - 0 - 1 salty-river-20064.herokuapp.com/genetica_mole (...) 3.219.96.23
2022-10-20 23:55:00 +0000
0 - 0 - 1 realizesolucoesfinancei.herokuapp.com/cartoes (...) 3.219.96.23
2022-10-05 19:49:00 +0000
0 - 0 - 1 beautiful-lake-clark-67968.herokuapp.com/jana (...) 3.219.96.23
2022-09-28 06:31:36 +0000
4 - 0 - 22 mabusgswuiw.herokuapp.com/ 3.219.96.23

Last 5 reports on ASN: AMAZON-AES

Date UQ / IDS / BL URL IP
2022-12-08 03:46:41 +0000
0 - 0 - 3 getmailpoll.com/ 54.158.9.234
2022-12-08 03:43:03 +0000
0 - 0 - 1 webofix.com/application/views/public/section/ (...) 52.86.6.113
2022-12-08 03:42:26 +0000
0 - 0 - 4 technologyreportscuratedportal.com/18972-1321 (...) 54.224.210.192
2022-12-08 03:27:37 +0000
0 - 0 - 2 curatednetworkmotingnetwork.com/splunk-0f8118 (...) 52.207.173.28
2022-12-08 03:14:49 +0000
0 - 0 - 1 theneonblonde.com/tag/vest 3.94.41.167

Last 3 reports on domain: mabusgswuiw.herokuapp.com

Date UQ / IDS / BL URL IP
2022-09-28 08:57:58 +0000
4 - 0 - 22 mabusgswuiw.herokuapp.com/ 3.216.88.24
2022-09-28 06:31:36 +0000
4 - 0 - 22 mabusgswuiw.herokuapp.com/ 3.219.96.23
2022-09-28 02:05:58 +0000
4 - 0 - 22 mabusgswuiw.herokuapp.com/ 3.216.88.24

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-23 19:27:06 +0000
20 - 0 - 0 xxddxahjdf.herokuapp.com/ 23.22.144.165
2022-10-30 10:56:29 +0000
4 - 0 - 18 jggffdsafghj56ry.herokuapp.com/ 34.201.81.34
2022-10-29 12:27:25 +0000
4 - 0 - 18 jggffdsafghj56ry.herokuapp.com/ 54.224.34.30
2022-10-29 08:54:34 +0000
4 - 0 - 18 jggffdsafghj56ry.herokuapp.com/ 54.224.34.30
2022-10-29 02:51:22 +0000
4 - 0 - 18 jggffdsafghj56ry.herokuapp.com/ 54.208.186.182


JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (36)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 05:36:43 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qLOrZWMG1NsMahmL0evuHtickF5SBpTwoPWJ4PYOlBJGKmVHPSc4Lw==
Age: 3282


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10637
Expires: Wed, 28 Sep 2022 09:28:42 GMT
Date: Wed, 28 Sep 2022 06:31:25 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.49
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nFLWqRDvWa7gYnNjxbDYQGBx_8cCVDutfDhMxMwRN-XR1AGIgTdKww==
age: 76032
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET / HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Content-Length: 104080
Etag: W/"19690-1rWllddCAbTsl8uCWqbGBBvEe/A"
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (18085)
Size:   104080
Md5:    52af2064ec2a7f435c7be02feb6d782a
Sha1:   d6b5a595d74201b4ec97cb825aa6c6041bc47bf0
Sha256: 0bb189bf21dfc03a2cb0410b65346808d5eb517a219645fc5b7ccabfa834fa6d

Alerts:
  Blocklists:
    - openphish: Office365
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 28 Sep 2022 06:31:25 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /css/bootstrap.min.css HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"22ffd-1837fad0120"
Content-Length: 143357
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  ASCII text, with very long lines (65325)
Size:   143357
Md5:    43633a5031acbf5b824d5acec9664379
Sha1:   8dc1252a0137e0d45f9f7c0abfc64589ea0f53e4
Sha256: 53d25dcf244d33268a63514fc50e884a189ca18bf7c9f7b2b346ea379f8591c1

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /css/css.css HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"43a-1837fad0120"
Content-Length: 1082
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  ASCII text
Size:   1082
Md5:    dc7361604bc89fa1921caec99568fe61
Sha1:   4bfab21e57da406719ba5878a5a98448cb613619
Sha256: e4451fe02958df64952d999b0d7edb674197b6c10e3bfc4e82a4b53e88007f0c

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /modal.js HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"78f-1837fad0120"
Content-Length: 1935
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  ASCII text
Size:   1935
Md5:    d10d73f1983737f41fd87b62bb5eda31
Sha1:   8ac515d6fa99bfd3e4b80b67c37e94d9862b2caf
Sha256: 75790dd5af7857b65135169c855537b8b029651c8c2b421ba2233569ee806ce7

Alerts:
  Blocklists:
    - openphish: Office365
    - fortinet: Phishing
                                        
                                            GET /img/292d09fb0a8be4163b49f8756b9af48b3f6fc2d2.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"2d1e-1837fad0120"
Content-Length: 11550
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 460 x 360, 8-bit/color RGBA, non-interlaced\012- data
Size:   11550
Md5:    56b5e8ef1616148572c8d7f6b1729550
Sha1:   292d09fb0a8be4163b49f8756b9af48b3f6fc2d2
Sha256: eb30ccb0c4d8275620947780d68c61f93849c86c6085f100a7744b83328ac482

Alerts:
  urlquery:
    - Phishing - Microsoft Services
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/519096ad3f03410cf9ce3c9b9fcca6b439d97b23.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"303-1837fad0120"
Content-Length: 771
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size:   771
Md5:    c3fc46c5799c76f9107504028f39190f
Sha1:   519096ad3f03410cf9ce3c9b9fcca6b439d97b23
Sha256: 57898461712a639d119bdf88b7145919dcc8956c7a271d2e4a1084b29eae6785

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/17c27c038644bdb141381b606c7c94a177c07326.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"6758-1837fad0120"
Content-Length: 26456
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 253 x 218, 8-bit/color RGBA, non-interlaced\012- data
Size:   26456
Md5:    ec9cbc1048239b3927ad0276fc983019
Sha1:   17c27c038644bdb141381b606c7c94a177c07326
Sha256: f8a8cf4f1928938c796e2f35f8c21b0d510d4e3f16e016ee83d1f206f8ebde14

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/cec15f6470d0237569e931d7d11752b41ac5d8a3.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"46e3-1837fad0120"
Content-Length: 18147
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 187 x 188, 8-bit/color RGBA, non-interlaced\012- data
Size:   18147
Md5:    a5cdadd60382e9ae6228121542eb1c2a
Sha1:   cec15f6470d0237569e931d7d11752b41ac5d8a3
Sha256: 71e729939e175f4ae9d3fcc645d6b7389ec341a47a84950e047197331fdc22f1

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/45a8b436d07d7ed7973b87a1c393d6973afe6fb5.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"460b-1837fad0120"
Content-Length: 17931
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 151 x 151, 8-bit/color RGBA, non-interlaced\012- data
Size:   17931
Md5:    4458cd0a6df7deabdff0b99bd5905ec9
Sha1:   45a8b436d07d7ed7973b87a1c393d6973afe6fb5
Sha256: aad24ed5f36320964c515b9889cb2943bbf830b40703999ad3976fce8176e554

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/968e37c27f2a687fcfe4b306fcd7fa554c36645b.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"2ddd-1837fad0120"
Content-Length: 11741
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 515 x 521, 8-bit colormap, non-interlaced\012- data
Size:   11741
Md5:    fcd07aed4443c75ea305f2716ae32edf
Sha1:   968e37c27f2a687fcfe4b306fcd7fa554c36645b
Sha256: ddf5887ce15778102013d5527ec1fd09bc400fa19b91416b36b828ecdbd76ca8

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/d5c7b5b8b5ce6484ba8871ba798c13cc1e73b078.jpeg HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"7945-1837fad0120"
Content-Length: 31045
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 670x335, components 3\012- data
Size:   31045
Md5:    44d72116f7f778a14e6a212d2231ad91
Sha1:   d5c7b5b8b5ce6484ba8871ba798c13cc1e73b078
Sha256: 5b1c0e1f78176fe1c432d5038c383b0bf467e15ee5cd122e871d85fc583d1f33

Alerts:
  urlquery:
    - Phishing - Microsoft Services
  Blocklists:
    - openphish: Office365
    - fortinet: Phishing
                                        
                                            GET /img/e9c4a10389fbaa3cd4c25a5d00dfae6060549f58.jpeg HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"f226-1837fad0120"
Content-Length: 61990
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 946x481, components 3\012- data
Size:   61990
Md5:    f9cde42e5567950935a44c6a4b103c40
Sha1:   e9c4a10389fbaa3cd4c25a5d00dfae6060549f58
Sha256: d5a6b16241b54c1029551db26820dd95a660e029d8d7231f874152bebb0356ca

Alerts:
  urlquery:
    - Phishing - Microsoft Services
  Blocklists:
    - openphish: Office365
    - fortinet: Phishing
                                        
                                            GET /img/aollogo.gif HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"2224-1837fad0120"
Content-Length: 8740
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  GIF image data, version 87a, 598 x 257\012- data
Size:   8740
Md5:    69ecfe2c307dc5ceca0ba4f542ff5869
Sha1:   1859336177dba07d0facfebf61513c6220659f19
Sha256: 17488bf226ff7611dd4394f2bc4205ba3d497e500e3264567c04de110dd4b212

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/0e1c691f87cc4fa35c88344974f2829c40176b70.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"557a-1837fad0120"
Content-Length: 21882
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 190 x 187, 8-bit/color RGBA, non-interlaced\012- data
Size:   21882
Md5:    6843a244e12fab158aa189680b5e7049
Sha1:   0e1c691f87cc4fa35c88344974f2829c40176b70
Sha256: 3a9b144d6482b78afc4e0a940a1d3c22240f14fa535b808cf4dab9635339569f

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/yaho.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"3acc-1837fad0120"
Content-Length: 15052
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 3000 x 2000, 4-bit colormap, non-interlaced\012- data
Size:   15052
Md5:    d06919c7dfc5d9f580b67649186846d2
Sha1:   d85a684ffe7118dfbc9af5f1aa0b861e6a73e83f
Sha256: 90757818dc5d699448113836c77b9fed337b2e69b83e7a8ff11bc967b0af172c

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 06:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 28 Sep 2022 07:18:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: g0mOp42knLNwM7rM0u6XjH32O08iv1-obZ01i_QxYh-xH5moqxKMCA==
Age: 112


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /img/gmail.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"104b7-1837fad0120"
Content-Length: 66743
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced\012- data
Size:   66743
Md5:    dce2f2b0e50cb1dbb0246d152791cb46
Sha1:   d0a69c159304edc08db005163e7a0daf5a1e98a6
Sha256: acf087c1757f08b0cfd53d59066544d7ef0bfcc50999e77c5813739cd9dc1479

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET /img/outlooklogo.png HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Tue, 27 Sep 2022 15:59:48 GMT
Etag: W/"28c29-1837fad0120"
Content-Length: 166953
Date: Wed, 28 Sep 2022 06:31:25 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  PNG image data, 920 x 920, 8-bit/color RGB, non-interlaced\012- data
Size:   166953
Md5:    b3461a0c9acfb77b6d069980c1e50e7d
Sha1:   9db53607c7d6c9b3c6803b686dabcfe69099a760
Sha256: 6fbd6fc8ef50159223c360622d9c2a149fd7d8839c2390c7e3631255e91a2171

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3920
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 06:31:26 GMT
Last-Modified: Wed, 28 Sep 2022 05:26:06 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: mabusgswuiw.herokuapp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mabusgswuiw.herokuapp.com/

                                         
                                         23.22.52.7
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Length: 150
Date: Wed, 28 Sep 2022 06:31:26 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   150
Md5:    84241342d84ac29592a5d9516f8edf7f
Sha1:   03c53980e18e17625f439c20e7d438f066202428
Sha256: 6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c

Alerts:
  Blocklists:
    - openphish: Office365
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3AR6RlUI8xthbQg16Dl8yw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.242.3.166
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KmotDDyb10Nm3H245zv4NOqF44Q=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18792
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 06:31:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18792
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 06:31:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18792
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 06:31:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18792
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 06:31:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18792
Expires: Wed, 28 Sep 2022 11:44:39 GMT
Date: Wed, 28 Sep 2022 06:31:27 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc892aae9-4381-46ed-9dd8-bd581d7389ee.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8621
x-amzn-requestid: 5a828651-41c2-4aa0-931d-6522098a8438
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZASUWEYvIAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ffdb5-5ace75523a98a9237fabca8f;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 07:05:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _r1yeWUGcjSAzmlPcqiZrNgOGrGb29Dxgrz3AOm9oU0-wgHy7axiKw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:40:36 GMT
age: 82251
etag: "883e61d46ef6c09013724aa7b8f560272ee08574"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8621
Md5:    59163c799f3d48e74abdd285ee615119
Sha1:   883e61d46ef6c09013724aa7b8f560272ee08574
Sha256: e1bafc575ff4274b210bee481a8e73c065de5bc14ddf46c269ef91eda0df8d84
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F838bed0c-c665-42d6-8c20-1decd709953c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9314
x-amzn-requestid: 0639452b-7f17-4513-aeb1-20b465ed3e93
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e3HzCIAMF-vQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5e-52afa1da17c4557c5e8c3564;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4mjt2-5F0Chu1G7jShI6rXfTuBMd6JOYxFMtla-EgL7i82SThJnp5w==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:38:41 GMT
age: 31966
etag: "60c873f097c85376797fed366804119f7e9c445e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9314
Md5:    3c58fdf09a7d552be0c8666522a29de7
Sha1:   60c873f097c85376797fed366804119f7e9c445e
Sha256: 24569f084d3fd428526503bde8b3da64152911934cd5e0e9140c06d954e4bcd9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0369629e-f44d-439f-a279-b5ae6ecc0cf1.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14464
x-amzn-requestid: 6627e07e-034b-432e-ab9e-afe035fa0b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e9HgIoAMFxUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-7f34c3f6454379724a7ac413;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: J27vcANRhkMUuGwTZjXkO0EF0-UjN-MODVQRKgsc7hJI2S-UPF8Ctw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:53 GMT
age: 31834
etag: "bc214d60be395d4cf753216ff8f9691c33d25e75"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14464
Md5:    aa5cad224dbddd71881bd07255beb4da
Sha1:   bc214d60be395d4cf753216ff8f9691c33d25e75
Sha256: 82935e52aa59929a448d17a5a2d58fda86bb5c25bf6628a05bd904f82517dada
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11314
x-amzn-requestid: 9f410158-cd1a-45a9-9e86-4005b25577e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4Hw7oAMFpAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-70683c681f22a3b6103fcb4a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l9IinQYCcQV_iymSArIEnOWgbmLlmVqz94402zcsmga5Bp3Sty7QRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:49 GMT
age: 31838
etag: "8ad289a77705358ab660b6123e9d90de991b6c13"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11314
Md5:    ee83d08d024d127fad5918e1ffacb78b
Sha1:   8ad289a77705358ab660b6123e9d90de991b6c13
Sha256: aaab3590ef3777ce8b7a9a34f18866fa20ecaa554cbcdcdb3f1fa3c34c88ceb4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14018
x-amzn-requestid: fb0f02e7-1ce0-4861-9446-13d60df06f24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xSEhCIAMFWkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd4-79f482493d204a1208fad00f;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZAov4fpWAjIBhHfeYEwu39wJTG58HnW7ebekpIoNSgA7PLIs5b7sSg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:09:19 GMT
age: 30128
etag: "78b1a603c4f7f2d6fbad15d7a4cd1397554339e9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14018
Md5:    d039db0b842a4cbbaefdaab98bc6722b
Sha1:   78b1a603c4f7f2d6fbad15d7a4cd1397554339e9
Sha256: 65a3c7b0515cfd2a723f3bc3147cb98f3dd75ce1ecfce915c7c8e9ba5ae0bf2d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10031
x-amzn-requestid: 0ac9a228-b6ce-4695-b269-f6a5ba959576
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4HTsoAMF8dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-1d1cacef2608d5820b2bc1b1;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: HKSCXbOStqMfD92WWwpkNF1l9euR9RkHTo2boSKqhPAunGl2u_YGlg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:46:48 GMT
age: 31479
etag: "e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10031
Md5:    07f06c54e3b1431203308e4134e7efcb
Sha1:   e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49
Sha256: 2814f21c6a21623c189163672867272eb24f754d3d22a8285349e5dd9f6b49f7