Overview

URL https://update.youngzsoft.com/icafecloud/update/icafecloudsetup.exe
IP96.126.108.173
ASNLinode, LLC
Location United States
Report completed2022-06-23 00:43:11 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-06-23 2 update.youngzsoft.com/icafecloud/update/icafecloudsetup.exe Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

URL update.youngzsoft.com/icafecloud/update/icafecloudsetup.exe
IP  96.126.108.173
Magic PE32 executable (GUI) Intel 80386, for MS Windows\012- data
Size 11752880
MD5 df160aa9a4eb075f88458d88f41243af
SHA1 e65c15ab05b9c1355a9ae5903d99455db19993e1
SHA256 7b773d4872645737f76069f91ee9ac96972602856ed3e1b5c990a94cbcbfb4d6
Analyzer Analysed Verdict Comment
VirusTotal 2022-06-22 23:59:14 4/67


Passive DNS (8)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-06-22 19:43:07 UTC 93.184.220.29
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-06-22 04:45:40 UTC 34.215.40.77
[Mnemonic Passive DNS] update.youngzsoft.com (1) 0 No data No data 96.126.108.173 Domain (youngzsoft.com) ranked at: 384506
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-06-22 08:07:04 UTC 34.120.237.76
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.65
[Mnemonic Passive DNS] r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-06-22 04:45:09 UTC 23.36.77.32
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-06-22 04:45:39 UTC 54.230.111.64
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 96.126.108.173

Date UQ / IDS / BL URL IP
2022-06-23 19:00:41 +0000
0 - 0 - 1 update.youngzsoft.com/icafecloud/update/icafe (...) 96.126.108.173
2022-06-23 19:00:26 +0000
0 - 0 - 1 update.youngzsoft.com/icafecloud/update/icafe (...) 96.126.108.173
2022-06-23 14:58:38 +0000
0 - 0 - 1 update.youngzsoft.com/icafecloud/update/icafe (...) 96.126.108.173
2022-06-23 14:06:32 +0000
0 - 0 - 1 update.youngzsoft.com/icafecloud/update/icafe (...) 96.126.108.173
2022-06-22 17:12:05 +0000
0 - 0 - 1 https://update.youngzsoft.com/icafecloud/upda (...) 96.126.108.173
2022-06-22 16:39:51 +0000
0 - 0 - 1 https://update.youngzsoft.com/icafecloud/upda (...) 96.126.108.173
2022-06-19 06:29:03 +0000
0 - 0 - 1 https://update.youngzsoft.com/icafecloud/upda (...) 96.126.108.173
2019-05-28 20:36:42 +0200
0 - 1 - 0 user.youngzsoft.com/ccproxy/update/ccproxyset (...) 96.126.108.173
2019-05-28 19:09:35 +0200
0 - 1 - 0 user.youngzsoft.com/ccgetmac/update/ccgetmacs (...) 96.126.108.173
2019-05-27 23:52:01 +0200
0 - 1 - 0 youngzsoft.com/en/ccproxy/ccproxysetup.exe 96.126.108.173

Last 10 reports on ASN: Linode, LLC

Date UQ / IDS / BL URL IP
2022-08-19 00:41:43 +0000
0 - 0 - 1 https://admin.classified.pointsource.ng/a3et6 (...) 139.162.200.189
2022-08-19 00:40:59 +0000
0 - 0 - 1 admin.classified.pointsource.ng/a3et6u5dw.rar 139.162.200.189
2022-08-19 00:39:24 +0000
0 - 0 - 2 https://tobecoaching.co.uk/lfi9iu.rar 139.162.200.189
2022-08-18 22:32:23 +0000
0 - 0 - 1 www.chawkyfrenn.com/icon/JtT/ 50.116.62.25
2022-08-18 21:45:33 +0000
0 - 0 - 2 winplace.life/ 194.233.171.66
2022-08-18 20:38:25 +0000
0 - 0 - 2 www.tercantiq.com/m56u/ 139.162.38.10
2022-08-18 19:22:46 +0000
0 - 0 - 1 admin.classified.pointsource.ng/a3et6u5dw.rar 139.162.200.189
2022-08-18 19:21:10 +0000
0 - 0 - 2 https://tobecoaching.co.uk/lfi9iu.rar 139.162.200.189
2022-08-18 17:16:30 +0000
0 - 0 - 1 www.chawkyfrenn.com/icon/JtT/ 50.116.62.25
2022-08-18 15:29:18 +0000
10 - 0 - 0 readion.deaftone.com/a81wxs0am7v0brlk0dop0106 (...) 45.33.2.79

No other reports on domain: youngzsoft.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (20)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Content-Type, Alert, Backoff, Content-Length
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 22 Jun 2022 23:43:34 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mmPDidqMWTXoOR4mRowhha9QooVF91_lplcvN4QlK51SnO892AEJdw==
Age: 3562


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    c98c56ff7bc7ba547517573963f425e3
Sha1:   58c8dccc28ecd76424af6ed9988575a35cf8a0c2
Sha256: d57d9d5e87e8761ffdf790ff762307f5c823e8e8241781797373c10e076ec44e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "22A7AFFA696C3188DD074DEB68A2EC519EA227AC839D0238C9F82660B9E14D6A"
Last-Modified: Tue, 21 Jun 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2545
Expires: Thu, 23 Jun 2022 01:25:21 GMT
Date: Thu, 23 Jun 2022 00:42:56 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.64
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Wed, 11 May 2022 19:51:39 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 22 Jun 2022 02:10:52 GMT
etag: "48ca0beea419a9039591cf1aee5179e0"
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yDSL7RJDCUR-yATqqspsdpNJ4qKeUXTpAsdoAg1PQOGCYeSTBPjY4w==
age: 81125
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    48ca0beea419a9039591cf1aee5179e0
Sha1:   9e92629f505fcc07aab51221e8fe62197a23e307
Sha256: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Thu, 23 Jun 2022 00:42:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2EAF6761C95518941D85416EED81D020D0FCE4A801905ED83247D390C60D0407"
Last-Modified: Wed, 22 Jun 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18440
Expires: Thu, 23 Jun 2022 05:50:16 GMT
Date: Thu, 23 Jun 2022 00:42:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 999
Cache-Control: 'max-age=158059'
Date: Thu, 23 Jun 2022 00:42:56 GMT
Last-Modified: Thu, 23 Jun 2022 00:26:17 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /K56ZuYj9T59VjgCbW05+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.215.40.77
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DtDG3vFVflXXtPzUddE1OLvBRF0=

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Content-Type, Last-Modified, Alert, Backoff, Pragma, Expires, Content-Length, Cache-Control
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 23 Jun 2022 00:11:58 GMT
Expires: Thu, 23 Jun 2022 01:09:26 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5MkM038l_SJ16w69f-8q2W_U2kcjvW519fKPHaZKuUVbegbblO7KfA==
Age: 1859


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /icafecloud/update/icafecloudsetup.exe HTTP/1.1 
Host: update.youngzsoft.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         96.126.108.173
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Server: nginx/1.18.0
Date: Thu, 23 Jun 2022 00:42:56 GMT
Content-Length: 11752880
Last-Modified: Sat, 11 Jun 2022 13:51:07 GMT
Connection: keep-alive
ETag: "62a49dcb-b355b0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PE32 executable (GUI) Intel 80386, for MS Windows\012- data
Size:   11752880
Md5:    df160aa9a4eb075f88458d88f41243af
Sha1:   e65c15ab05b9c1355a9ae5903d99455db19993e1
Sha256: 7b773d4872645737f76069f91ee9ac96972602856ed3e1b5c990a94cbcbfb4d6

Alerts:
  Blocklists:
    - fortinet: Malware
  File Analyzers:
    - virustotal: 4/67
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Thu, 23 Jun 2022 03:37:52 GMT
Date: Thu, 23 Jun 2022 00:42:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Thu, 23 Jun 2022 03:37:52 GMT
Date: Thu, 23 Jun 2022 00:42:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Thu, 23 Jun 2022 03:37:52 GMT
Date: Thu, 23 Jun 2022 00:42:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Thu, 23 Jun 2022 03:37:52 GMT
Date: Thu, 23 Jun 2022 00:42:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Thu, 23 Jun 2022 03:37:52 GMT
Date: Thu, 23 Jun 2022 00:42:59 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcee8a8f2-4891-46cb-8c8b-207c24f883fb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 4888
x-amzn-requestid: 5bb0e186-b13e-4e44-83ac-33ac99b651e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UJhDFGV1oAMFbSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b3aee0-6970efd0058965f1566422cb;Sampled=0
x-amzn-remapped-date: Thu, 23 Jun 2022 00:08:00 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LQSgtOmxrmgZK_6Ju2oSp8eYn43e2le84ndzgUu359iPc2yYUMH3-w==
via: 1.1 ffe7114eb67ff864ff5a46aa2b63ce6e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 00:17:08 GMT
age: 1551
etag: "a5e09cfd27016ab24ac2bf9c4d745dba39cf7aaf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4888
Md5:    f1e44d206a1f3c49fa2185b713a509e0
Sha1:   a5e09cfd27016ab24ac2bf9c4d745dba39cf7aaf
Sha256: b232e8a8af13f9e0d9353ab45bae5cb43efcf9f88df3319debabb6148aeb5d65
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ede3b35-ed04-43c1-a89d-1e51e8238519.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8664
x-amzn-requestid: 73e50f0d-161c-4499-a0de-5f0c488847e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UHN7pFQMIAMFzXw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b2c37d-665d55c33dbc35ae426f55ab;Sampled=0
x-amzn-remapped-date: Wed, 22 Jun 2022 07:23:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: adDKh34dFEHOLuFp65ql_jpbGRNYRc4bxg6fsEX6nNs3LIKpe7bXoA==
via: 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Jun 2022 13:23:29 GMT
age: 40770
etag: "21c3cee9895d0d49ebec760238535178cccf4a3d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8664
Md5:    d2e59de119422f4e4cc08572906c9146
Sha1:   21c3cee9895d0d49ebec760238535178cccf4a3d
Sha256: 3fb79d0c34bf27b111e659aa64cc190239c9a17954e2fdd0d353aabaaf845387
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a0c16ad-b87d-4d18-a472-80d73d035432.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9561
x-amzn-requestid: a9d230d8-4d6d-4be8-9069-e2c6979a7873
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UJgzbFySIAMFmCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b3ae7c-77ad732128e076b021b38635;Sampled=0
x-amzn-remapped-date: Thu, 23 Jun 2022 00:06:20 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OD7LQi-jM8ZIiqi0usNX7yFfuxwf43s2Nd3Sz-Ql7S8GIWm3ToEtFQ==
via: 1.1 3e91f96465935ca26fdc91d6cebce4fe.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 00:16:21 GMT
age: 1598
etag: "a9ef6abca4767b42e13409cf2541069fb0174837"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9561
Md5:    99924c20482fe041ebf8df86e1e99010
Sha1:   a9ef6abca4767b42e13409cf2541069fb0174837
Sha256: ddfb9abea5d593bb890f352b82178464458588433b24aba2f84ad288df85cfb8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a9018db-9e51-4804-9c56-7ac1d2176356.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7541
x-amzn-requestid: 779e91c5-09a6-4677-b9af-db6164ebb546
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UJhf-GHDoAMF4vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b3af99-3fcfaf7b7fb299d957dd7c98;Sampled=0
x-amzn-remapped-date: Thu, 23 Jun 2022 00:11:05 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uDomSO5Rz7P5lmAyxT-p3YnTaROMHeUY0lgSNTApWOhn5Xa0x3nKeA==
via: 1.1 ba55932f4947672586f0865cea81e028.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 00:16:24 GMT
age: 1595
etag: "042581a2f8d5f788b6dbf7c6c940a3952ae4bef9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7541
Md5:    0fe5340d565c2ab7d1b311321ed2f8a3
Sha1:   042581a2f8d5f788b6dbf7c6c940a3952ae4bef9
Sha256: 2085de5ba82db208e4e22402651fb0b795f66da76707c95550d4ebdb54f84c2f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd503013e-1d8c-401f-9cec-1ff9f66e12cc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6301
x-amzn-requestid: 36932e67-4488-4899-bc45-ea23fb66b248
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: T8VW-FNNoAMF6nw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ae68f9-58ca366c64b27fd570ce16d0;Sampled=0
x-amzn-remapped-date: Sun, 19 Jun 2022 00:08:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tVzSdMIep1HK47UfTZnvKvLm-_9_NaESIw_XvbtsfDc834acsAYzlQ==
via: 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Jun 2022 01:12:23 GMT
age: 84636
etag: "0d1c278b921fb50ab3e7c31851f099efbecbbbc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6301
Md5:    86fa458d383f4e14f204f22d50693fb6
Sha1:   0d1c278b921fb50ab3e7c31851f099efbecbbbc2
Sha256: 94629bc0b7076f2af81b4507f9fe8bd2b5cc71ea751957e38101e4220f3681e0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d9101ed-f1ad-41e1-96e4-6e260835d1a0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 13662
x-amzn-requestid: 72c07c41-d33c-442c-a53c-c2b138a4bb7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UJhDEG24IAMFU4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b3aee0-37884da747e60f0636106013;Sampled=0
x-amzn-remapped-date: Thu, 23 Jun 2022 00:08:00 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: W6Eb-9gisoGTD3_ot7pb9YwEOeVD0MZbH9BHZIpAn-5gaP6QgqRV2A==
via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Jun 2022 00:16:32 GMT
age: 1587
etag: "3bbc7416e172b4f751aa3f34a9f338d7dc02a81b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13662
Md5:    55b24894ed1f6a606af03dbd4653c771
Sha1:   3bbc7416e172b4f751aa3f34a9f338d7dc02a81b
Sha256: 2b40271596157886fe2ae8b80e0ee10be5005e53cfd7645f4446b4eb313fe9ce