Overview

URLgroupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
IP 52.207.173.28 (United States)
ASN#14618 AMAZON-AES
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-22 21:45:16 UTC
StatusLoading report..
IDS alerts0
Blocklist alert7
urlquery alerts No alerts detected
Tags None

Domain Summary (15)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
cdnjs.cloudflare.com (1) 235 2015-04-17 20:46:33 UTC 2022-11-22 06:59:45 UTC 104.17.24.14
cts.tradepub.com (2) 303776 2018-06-13 19:11:41 UTC 2020-05-07 16:09:46 UTC 209.133.56.108
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
ocsp.globalsign.com (2) 2075 2012-07-20 17:46:16 UTC 2020-05-02 20:58:10 UTC 104.18.21.226
img.tradepub.com (5) 131572 2013-04-18 12:57:55 UTC 2020-04-15 04:51:44 UTC 205.234.175.175
groupitcontentcuration.com (13) 0 2022-07-07 20:13:55 UTC 2022-11-22 20:45:59 UTC 52.207.173.28 Unknown ranking
r3.o.lencr.org (8) 344 No data No data 23.36.77.32
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 35.162.142.194
www.tradepub.com (1) 750480 2018-09-28 12:09:03 UTC 2020-04-18 21:43:41 UTC 209.133.56.117
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-22 05:47:51 UTC 34.102.187.140
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-22 05:40:51 UTC 34.117.237.239
polyfill.io (1) 102644 2016-02-12 00:04:58 UTC 2022-11-22 07:14:28 UTC 151.101.129.26
ocsp.netsolssl.com (1) 8381 2013-09-19 08:30:29 UTC 2020-04-08 20:55:49 UTC 172.64.155.188

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-22 2 groupitcontentcuration.com/lpScripts/assetsBehavior.js Phishing
2022-11-22 2 groupitcontentcuration.com/lib/itbf/page.js Phishing
2022-11-22 2 groupitcontentcuration.com/lib/itbf/customScripts/otherOption.js Phishing
2022-11-22 2 groupitcontentcuration.com/lib/bs3/bootstrap.min.js Phishing
2022-11-22 2 groupitcontentcuration.com/lib/jq/jq-3.5.1.min.js Phishing
2022-11-22 2 groupitcontentcuration.com/lib/uri/uri.js Phishing
2022-11-22 2 groupitcontentcuration.com/lpScripts/assetsBehavior.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.207.173.28
Date UQ / IDS / BL URL IP
2023-01-09 15:11:10 +0000 0 - 0 - 2 groupinsightscurated.com/ 52.207.173.28
2023-01-06 05:58:26 +0000 0 - 0 - 4 techreportscuratedtips.com/20085-141678/unsub (...) 52.207.173.28
2022-12-26 04:00:14 +0000 0 - 0 - 2 curatedtechnologymedia.com/ 52.207.173.28
2022-12-25 21:49:23 +0000 0 - 0 - 14 technologycuratedpromotion.com/19779-138116/7 (...) 52.207.173.28
2022-12-23 05:49:27 +0000 0 - 0 - 14 technologycuratedpromotion.com/19779-138116/7 (...) 52.207.173.28


Last 5 reports on ASN: AMAZON-AES
Date UQ / IDS / BL URL IP
2023-01-28 13:41:49 +0000 0 - 0 - 10 bc6745.ezepo.net/unsubscribe/654/37/3/db08c7f (...) 54.159.228.173
2023-01-28 13:41:05 +0000 0 - 8 - 0 d7d.uz/ 174.129.25.170
2023-01-28 13:24:52 +0000 0 - 2 - 1 thundering-defiant-appeal.glitch.me/NFCUaccou (...) 34.231.87.196
2023-01-28 13:19:53 +0000 0 - 0 - 10 bc6745.ezepo.net/unsubscribe/654/37/3/db08c7f (...) 34.225.231.161
2023-01-28 13:16:46 +0000 0 - 0 - 2 35.169.5.110/ 35.169.5.110


Last 2 reports on domain: groupitcontentcuration.com
Date UQ / IDS / BL URL IP
2022-11-22 21:45:16 +0000 0 - 0 - 7 groupitcontentcuration.com/18950-132037/73426 (...) 52.207.173.28
2022-09-28 20:38:21 +0000 0 - 0 - 3 groupitcontentcuration.com/17151-119166/65606 (...) 52.207.173.28


No other reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 1887) - SHA256: 0fa1a1be2f4e200cd4f3d56dd48362bcb964af1805cee8c37ad323f630b4464b
< table cellpadding = "0"
cellspacing = "0"
border = "0"
width = "100%"
class = "TPconflg1x3inner" > < tr valign = "top" > < td class = "TPconflg1x3cell" > < p > < a href = "http://itbrief.tradepub.com/c/pubRD.mpl/?sr=ps&_t=ps:w_conflg1x3::ace&ch=TKU&qf=w_kryt01&_m=01.00ev.1.0.0"
target = "_blank" > < img src = "http://img.tradepub.com/free/w_kryt01/images/w_kryt01c4.gif"
border = "0" / > < /a></p > < a href = "http://itbrief.tradepub.com/c/pubRD.mpl/?sr=ps&_t=ps:w_conflg1x3::ace&ch=TKU&qf=w_kryt01&_m=01.00ev.1.0.0"
target = "_blank" > Maximizing Performance in Harsh Conditions: An In - Depth Automotive Lubricant Exploration < /a> <br>Your automotive lubricant selection can make or break vehicle...</td > < td class = "TPconflg1x3cell" > < p > < a href = "http://itbrief.tradepub.com/c/pubRD.mpl/?sr=ps&_t=ps:w_conflg1x3::ace&ch=TKU&qf=w_regb03&_m=01.00ev.1.0.0"
target = "_blank" > < img src = "http://img.tradepub.com/free/w_regb03/images/w_regb03c4.gif"
border = "0" / > < /a></p > < a href = "http://itbrief.tradepub.com/c/pubRD.mpl/?sr=ps&_t=ps:w_conflg1x3::ace&ch=TKU&qf=w_regb03&_m=01.00ev.1.0.0"
target = "_blank" > The Definitive Guide to Outsourcing as a Business Strategy During Recession < /a> <br>One of the most significant advantages of sales outsourcing is that it...</td > < td class = "TPconflg1x3cell" > < p > < a href = "http://itbrief.tradepub.com/c/pubRD.mpl/?sr=ps&_t=ps:w_conflg1x3::ace&ch=TKU&qf=w_coob43&_m=01.00ev.1.0.0"
target = "_blank" > < img src = "http://img.tradepub.com/free/w_coob43/images/w_coob43c4.gif"
border = "0" / > < /a></p > < a href = "http://itbrief.tradepub.com/c/pubRD.mpl/?sr=ps&_t=ps:w_conflg1x3::ace&ch=TKU&qf=w_coob43&_m=01.00ev.1.0.0"
target = "_blank" > Consulting - Specifying Engineer Magazine < /a> <br>Please use this form to subscribe to our magazine and newsletters - there's plenty to choose from!...</td > < /tr></table > < img src = "http://cts.tradepub.com/trk1/?ptnr=itbrief&tm=w_conflg1x3&type=w&cat=&key=&trk=TKU&p=w_kryt01,w_regb03,w_coob43" / >


HTTP Transactions (47)


Request Response
                                        
                                            GET /18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         52.207.173.28
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:05 GMT
Content-Length: 169
Connection: keep-alive
Location: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   169
Md5:    b51956ed2a6129f43c5d0ecc011cc5a5
Sha1:   c03157aff80067b6b57903d3843b9fd9e07b33ab
Sha256: 1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5990
Expires: Tue, 22 Nov 2022 23:24:55 GMT
Date: Tue, 22 Nov 2022 21:45:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3750
Cache-Control: 'max-age=158059'
Date: Tue, 22 Nov 2022 21:45:05 GMT
Last-Modified: Tue, 22 Nov 2022 20:42:35 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20317
Expires: Wed, 23 Nov 2022 03:23:42 GMT
Date: Tue, 22 Nov 2022 21:45:05 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 21:09:24 GMT
cache-control: public,max-age=3600
age: 2141
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    567df7db606cf5d0871aa5bc9311b6da
Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17
Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: MrLGM8hrwV5vo3icfxNzKiTYsdGaKxxyB+0ecKxdu3FTgOsaC1Rr1bVBje9J5wM49xZ1ppExVnA=
x-amz-request-id: PV2G430MDXHE2RZR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 21:39:43 GMT
age: 322
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 22 Nov 2022 21:45:06 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "83EF73FB0CECE6A92FB1829D5EBFC14CDFC3A968B395489CE95202FD52BD9BFC"
Last-Modified: Mon, 21 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21581
Expires: Wed, 23 Nov 2022 03:44:47 GMT
Date: Tue, 22 Nov 2022 21:45:06 GMT
Connection: keep-alive

                                        
                                            GET /18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.22.0
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.16
Cache-Control: max-age=0, must-revalidate, private
Date: Tue, 22 Nov 2022 21:45:06 GMT
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (320)
Size:   1757
Md5:    911f894a6f4a3042cccbf24c9f607bf3
Sha1:   371883571d6893e032eaa7eb7b38197ad558fa86
Sha256: 6aaa73207190e8bbb1918b2d339b1520c0e308457827fe79bb285d2c09635405
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 21:08:53 GMT
cache-control: public,max-age=3600
age: 2173
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://groupitcontentcuration.com
Connection: keep-alive
Referer: https://groupitcontentcuration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Tue, 22 Nov 2022 21:45:06 GMT
content-length: 6970
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ed13e63-5f7b"
last-modified: Fri, 29 May 2020 16:54:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1744294
expires: Sun, 12 Nov 2023 21:45:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4NwYDM%2F0Q7wAvsPW%2BjiWRumVPpVJT0p3gwXwGTpraCaLBu17%2BUW6Y072IEs265OAm1%2FPvYYw9ELDi2YEbnGfgPf%2FYqupwuDfoNPDRTxtzvhow%2FeliStatzK%2FjlDiyQyCdZmPVHBu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76e4d9a87bc40b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (24304)
Size:   6970
Md5:    4dff16256caf65b9530a221f15ed1661
Sha1:   e253fdfafb73d51e9d8c1632a521bf562c3d0975
Sha256: 1e51fbddb76b932b540fcd5e6ec3bfdf3196f0bb5e1f441a05d7d62208606e73
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1236
Cache-Control: 'max-age=158059'
Date: Tue, 22 Nov 2022 21:45:06 GMT
Last-Modified: Tue, 22 Nov 2022 21:24:30 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7 HTTP/1.1 
Host: polyfill.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://groupitcontentcuration.com
Connection: keep-alive
Referer: https://groupitcontentcuration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.129.26
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
last-modified: Fri, 18 Nov 2022 10:54:37 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Tue, 22 Nov 2022 21:45:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1634, PASS, fastly;desc="Edge time";dur=12
content-length: 74
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   74
Md5:    bdb6d8e9b581dfbdb87566776ede0cbd
Sha1:   d18cdeacd5c146b34919955e97e51b7db50d0d9b
Sha256: fe35c33df2fa5edeac1dbbe512a6e92c5b1e7fb5c204df818e23ea07b5121add
                                        
                                            GET /lib/itbf/style.css HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:06 GMT
Content-Length: 2133
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-855"
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   2133
Md5:    648686275ff597bad16490f363f9f085
Sha1:   7e252ec302b8551fb69519eb517723df2125db12
Sha256: 6b89575c78dca6bcba064e9641e4bbbd6d9829a724a9d9ccf1b8a6f1dc3a0c29
                                        
                                            GET /lpScripts/assetsBehavior.js HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:06 GMT
Content-Length: 9493
Last-Modified: Fri, 07 Oct 2022 13:13:57 GMT
Connection: keep-alive
ETag: "63402615-2515"
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   9493
Md5:    b3d79c3fb1a09ffcead07bd732d7d81a
Sha1:   d73f923eea8f386c4d441a076e1e77e59f0f7cf4
Sha256: 01f6570da4691ac14aa5f882167414fa699581b41cacfa07f8f7731663392cd4

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /lib/itbf/page.js HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:06 GMT
Content-Length: 64
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-40"
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   64
Md5:    d92feda1e0803db8dd470c03f1c9e2c9
Sha1:   d74214a948b48629df0d556921ff2b22d131d65b
Sha256: 73b8ec23d141fa549c55bb04af1efbd6bb923e5b5650cc6303a78e9083bc614e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /lib/itbf/customScripts/otherOption.js HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:06 GMT
Content-Length: 1330
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-532"
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   1330
Md5:    076d9d924c71cf335e12a6834927093b
Sha1:   a0c238a2363ad77055999dd3f38946c642c40396
Sha256: 88943dce849c72155c7c1adc47f8dc7aacc48a5fc8f422cb5aa7c76d1bcfe541

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: a4F9g6i1ey0iyVwu7UKBHA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.162.142.194
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ljcaf1lqHTjP1sq1y4bWVUpoEgI=

                                        
                                            GET /lib/bs3/bootstrap.min.css HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:06 GMT
Content-Length: 122540
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-1deac"
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (65371)
Size:   122540
Md5:    5d5357cb3704e1f43a1f5bfed2aebf42
Sha1:   08df9a96752852f2cbd310c30facd934e348c2c5
Sha256: 31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87
                                        
                                            GET /lib/bs3/bootstrap.min.js HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:06 GMT
Content-Length: 36816
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-8fd0"
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (32034)
Size:   36816
Md5:    4becdc9104623e891fbb9d38bba01be4
Sha1:   6c264e0e0026ab5ece49350c6a8812398e696cbb
Sha256: 4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /lib/jq/jq-3.5.1.min.js HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:06 GMT
Content-Length: 89475
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-15d83"
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   89475
Md5:    12b69d0ae6c6f0c42942ae6da2896e84
Sha1:   d2cc8d43ce1c854b1172e42b1209502ad563db83
Sha256: 6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /lib/uri/uri.js HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:06 GMT
Content-Length: 76862
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-12c3e"
Expires: Tue, 22 Nov 2022 21:45:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1107)
Size:   76862
Md5:    64437cd33e2fa1a40e6850ee6388639e
Sha1:   809078716153b491c00852f366ca3f8d6e03df22
Sha256: 96361c580499a6dd7afa83f352fb2a27c159a39daf794e2e6813514be8a8fbe9

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.netsolssl.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 06:01:55 GMT
Expires: Mon, 28 Nov 2022 06:01:54 GMT
Etag: "f51f3c90541c06d8e8cc0c28bae6d2b0c69bedcb"
Cache-Control: max-age=461206,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e4d9abcb33b524-OSL

                                        
                                            GET /data/tphpjs/itbrief.tphp.js HTTP/1.1 
Host: www.tradepub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         209.133.56.117
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Server: Apache/2.2.3 (CentOS)
Set-Cookie: Apache=209.133.56.236.1669153507309755; path=/; domain=.tradepub.com
Last-Modified: Fri, 24 Mar 2017 00:28:41 GMT
ETag: "d11da24e-275-54b6f134fc040"
Accept-Ranges: bytes
Content-Length: 629
nnCoection: close


--- Additional Info ---
Magic:  ASCII text, with very long lines (628)
Size:   629
Md5:    82ed4a316d32aa15a8ac9630844540e4
Sha1:   5154494d15f381893fb9a3d73f4e090740f3a549
Sha256: 7d2a5b9178eba3bc0da4c96b9e1f9aed2014b18eabb674bf46eb1af336bc7155
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 26 Nov 2022 19:40:20 GMT
ETag: "41c38cd05c37db07fdd58577a0720df95a1761ec"
Last-Modified: Tue, 22 Nov 2022 19:40:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1547
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e4d9ad7fd8b512-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    bdec0cc9a217c56cae4baa29cf864833
Sha1:   41c38cd05c37db07fdd58577a0720df95a1761ec
Sha256: 75555bbcbb659c266de18d572133aa66c441f767f615f7a3609c46819b7e096a
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 26 Nov 2022 19:40:20 GMT
ETag: "41c38cd05c37db07fdd58577a0720df95a1761ec"
Last-Modified: Tue, 22 Nov 2022 19:40:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1547
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e4d9ad7f66b4f4-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    bdec0cc9a217c56cae4baa29cf864833
Sha1:   41c38cd05c37db07fdd58577a0720df95a1761ec
Sha256: 75555bbcbb659c266de18d572133aa66c441f767f615f7a3609c46819b7e096a
                                        
                                            GET /free/w_sale439/images/w_sale439.gif HTTP/1.1 
Host: img.tradepub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         205.234.175.175
HTTP/2 200 OK
content-type: image/gif
                                        
date: Tue, 22 Nov 2022 21:45:07 GMT
content-length: 2644
access-control-allow-origin: *
x-cfhash: "58d28201424f17c2360c04e47d80f725"
x-cff: B
last-modified: Mon, 21 Nov 2022 20:05:26 GMT
x-cf3: M
cf4age: 0
x-cf-tsc: 1669139626
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf-reqid: 34b36ae300929d8ec02a716564b55560
x-cf1: 13644:fA.arn1:cf:cacheN.arn1-01:M
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 235 x 42\012- data
Size:   2644
Md5:    58d28201424f17c2360c04e47d80f725
Sha1:   f72283ca601527f73f6101eb27091c3234fbd878
Sha256: c8812cdc250e7280a442007d9b5a1bde7962b2777681d7e25d72de0f1e9dece3
                                        
                                            GET /cts4/?ptnr=itbrief&tm=w_conflg1x3&hicat=&type=wp&key=&trk=TKU HTTP/1.1 
Host: cts.tradepub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         209.133.56.108
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Server: Apache
Keep-Alive: timeout=15
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1912)
Size:   1928
Md5:    a0eebe33cb0f8d60128acc9be1ee4be0
Sha1:   752c25f6e506ccbdc10d8c0529181a6efa81f64f
Sha256: a7beedfc2bcf6a692478a4e976e46c143793ef5cd00069200ccf8c2d9d11dcf1
                                        
                                            GET /free/w_sale439/images/w_sale439c8.jpg HTTP/1.1 
Host: img.tradepub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         205.234.175.175
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Tue, 22 Nov 2022 21:45:07 GMT
content-length: 132152
access-control-allow-origin: *
x-cfhash: "a301fb7b1223416bf586cc21dd903d6e"
x-cff: B
last-modified: Mon, 14 Nov 2022 21:20:47 GMT
x-cf3: H
cf4age: 56601
x-cf-tsc: 1668923363
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf-reqid: 1150e946a37dfd29a29bbbf62a90765d
x-cf1: 13644:fA.arn1:cf:cacheN.arn1-01:M
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x1555, components 3\012- data
Size:   132152
Md5:    a301fb7b1223416bf586cc21dd903d6e
Sha1:   144ec498b85565ade156da71cbb2cc43e2ee8b97
Sha256: 7033c664cf4ce092e678295acd7d595c75a0ff3c4de6c994008232d978ef653b
                                        
                                            GET /free/w_kryt01/images/w_kryt01c4.gif HTTP/1.1 
Host: img.tradepub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         205.234.175.175
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Content-Length: 24374
Connection: keep-alive
Access-Control-Allow-Origin: *
X-CFHash: "a0bfa496d2102ec043d071db8d714f11"
X-CFF: B
Last-Modified: Tue, 21 Jun 2022 14:50:29 GMT
X-CF3: M
CF4Age: 0
x-cf-tsc: 1657649726
CF4ttl: 31536000.000
X-CF2: H
Accept-Ranges: bytes
Server: CFS 0215
X-CF-ReqID: aedd578428ebaee04ed622527405cf59
X-CF1: 13644:fA.arn1:cf:cacheN.arn1-01:M


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 259\012- data
Size:   24374
Md5:    a0bfa496d2102ec043d071db8d714f11
Sha1:   122c72c2828c315542048a2052f12d5ed3e06252
Sha256: bf893cf55764206e7b03f90442f832abba8e7f6c02c4f188d1d2ae015efe71e7
                                        
                                            GET /free/w_regb03/images/w_regb03c4.gif HTTP/1.1 
Host: img.tradepub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         205.234.175.175
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Content-Length: 13817
Connection: keep-alive
Access-Control-Allow-Origin: *
X-CFHash: "4ff07087b917f1f34afcd86a13949ecf"
X-CFF: B
Last-Modified: Mon, 14 Nov 2022 14:52:18 GMT
X-CF3: H
CF4Age: 11445
x-cf-tsc: 1668450269
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: f6412321538bc6ab3a8c3b40a3ece3c7
X-CF1: 13644:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 259\012- data
Size:   13817
Md5:    4ff07087b917f1f34afcd86a13949ecf
Sha1:   c4657dfe564642390ce293633b3f711e010ef236
Sha256: f9b2352022afd9689da7063f1c9d6fc46aecd5f374891e5d1b500fdf4c47444d
                                        
                                            GET /free/w_coob43/images/w_coob43c4.gif HTTP/1.1 
Host: img.tradepub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         205.234.175.175
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Content-Length: 40066
Connection: keep-alive
Access-Control-Allow-Origin: *
X-CFHash: "a701f72ccf785d89ae310846e68ed223"
X-CFF: B
Last-Modified: Thu, 01 Sep 2022 19:34:43 GMT
X-CF3: H
CF4Age: 312067
x-cf-tsc: 1662382185
CF4ttl: 31536000.000
X-CF2: H
Accept-Ranges: bytes
Server: CFS 0215
X-CF-ReqID: 07c2f80505235346b1f0bad09bddab8c
X-CF1: 13644:fA.arn1:cf:cacheN.arn1-01:M


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 259\012- data
Size:   40066
Md5:    a701f72ccf785d89ae310846e68ed223
Sha1:   ec48bb93f487c0a4e5f402363060468148d99519
Sha256: 7b4233d683ab3395648441601f7179def5c65150fe26b809f2d13048561680e4
                                        
                                            GET /lpScripts/assetsBehavior.js HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
If-Modified-Since: Fri, 07 Oct 2022 13:13:57 GMT
If-None-Match: "63402615-2515"

search
                                         52.207.173.28
HTTP/1.1 304 Not Modified
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:07 GMT
Last-Modified: Fri, 07 Oct 2022 13:13:57 GMT
Connection: keep-alive
ETag: "63402615-2515"
Expires: Tue, 22 Nov 2022 21:45:07 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /lib/itbf/bg.jpg HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/lib/itbf/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:07 GMT
Content-Length: 237484
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Connection: keep-alive
ETag: "6074ab5b-39fac"
Expires: Tue, 22 Nov 2022 22:45:07 GMT
Cache-Control: max-age=3600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2014:07:01 14:51:59], baseline, precision 8, 1366x768, components 3\012- data
Size:   237484
Md5:    1dba0da5912b67751021b7569fc540c8
Sha1:   cbd84515581c703faee04780d28c074617dbe10f
Sha256: d6791c8426846097bfaf2a40143344656ba6875cce3feff1b46026320f3acd2a
                                        
                                            GET /trk1/?ptnr=itbrief&tm=w_conflg1x3&type=w&cat=&key=&trk=TKU&p=w_kryt01,w_regb03,w_coob43 HTTP/1.1 
Host: cts.tradepub.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

search
                                         209.133.56.108
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 22 Nov 2022 21:45:07 GMT
Server: Apache
pragma: no-cache
content-length: 67
Keep-Alive: timeout=15
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   67
Md5:    c2db45a8f494c4b40095f4fd38d613fd
Sha1:   211639854b03d88502835b2649d42066016fa452
Sha256: 09d46019c7a75b96187202c3c8412182f27c413a9c3661857923dc8e94e91b7b
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: groupitcontentcuration.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         52.207.173.28
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx/1.22.0
Date: Tue, 22 Nov 2022 21:45:07 GMT
Content-Length: 34494
Last-Modified: Wed, 14 Sep 2022 11:51:00 GMT
Connection: keep-alive
ETag: "6321c024-86be"
Expires: Tue, 22 Nov 2022 22:45:07 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Size:   34494
Md5:    d4a95c780824be97bc45a187ab7ad24b
Sha1:   53aeb2d44190d91ec2006379b3ddbd202b865d24
Sha256: 502322d8592de8395d6e7c2c37b18e04904e62d8f8b3caaa53858e4ebc64b692
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15297
Expires: Wed, 23 Nov 2022 02:00:05 GMT
Date: Tue, 22 Nov 2022 21:45:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15297
Expires: Wed, 23 Nov 2022 02:00:05 GMT
Date: Tue, 22 Nov 2022 21:45:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15297
Expires: Wed, 23 Nov 2022 02:00:05 GMT
Date: Tue, 22 Nov 2022 21:45:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15297
Expires: Wed, 23 Nov 2022 02:00:05 GMT
Date: Tue, 22 Nov 2022 21:45:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B"
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15297
Expires: Wed, 23 Nov 2022 02:00:05 GMT
Date: Tue, 22 Nov 2022 21:45:08 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8685
x-amzn-requestid: 66455cc7-83d7-4570-99f9-5fa838da947f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrAHwKoAMFUHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee46-354d65e9609bc05647556a5a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -9tZPsMl7i5hr0N1rwJdQBLiOImuEO12RDL0pcPNjf6t-LkRbPaN2A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:02:46 GMT
etag: "b8c928f93a8d82b48491448d811a95ad99dc6aef"
age: 85342
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8685
Md5:    2ed6b76d15fc8d6295acdb6fb47461d3
Sha1:   b8c928f93a8d82b48491448d811a95ad99dc6aef
Sha256: de326836a9de677438b9ae724198e94348b0900c62817ff10de3677ce93fdae0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iGM_HV13dzz5eOswbOJfjj14jlFW4jy2YsW7eJumS_TM5TxxG8VMwQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 03:49:11 GMT
age: 64557
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11249
Md5:    481c033b9ffd030ff0de6e35cf788b47
Sha1:   85d3baad9217af2b5d75c019d2ef95dbb919a788
Sha256: 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6031
x-amzn-requestid: f59b04c5-4955-4847-9a7f-d9d53b47ca52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3cV0GC-oAMF5hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637940f1-0425b3cf6a4650b60936feba;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 20:47:45 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: StZ9dxgY8W0WwUUqsxyeISFnbm_WGGcm_AMuo9dzfhF9Yp7wM0TMMg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 08:17:57 GMT
age: 48431
etag: "56414a905340e1b1478a0a40a52b25365a724524"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6031
Md5:    4f3fad7453f45dfa617243c8beac64e1
Sha1:   56414a905340e1b1478a0a40a52b25365a724524
Sha256: 7befcfbedac5652eb04bc675b67f7b642631d4e918f7aaee17b0b594e26854d0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4639
x-amzn-requestid: 8a93fa29-158b-4402-aac4-85ad29a74ae1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oELooAMFWFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-5a85509b26d9aeef7ae59b4c;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z_LKFsiB_s81UenxBOVg9_qX_7vBHUZix7XF8YguDCytRn5opLkLRA==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:01:10 GMT
age: 85438
etag: "12e2654db1f384bb04f5c5042848b25dda86b710"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4639
Md5:    dafd9e17dc0023e71ae513c6025e4b80
Sha1:   12e2654db1f384bb04f5c5042848b25dda86b710
Sha256: e9c885a102dc811648cec4ac292db63564e81a48d7a3611cb31fba73b37286dd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10556
x-amzn-requestid: d2426c6d-5e78-496c-8649-0496a872b380
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-Iq0GPVoAMF9bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee45-1ee6dc09394731cc4dbfc38a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eHLf2DFK-3yN5dEG22XItPxRzmODRdThIYJI2oZqDJpgTGQGSQnGzQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:46:07 GMT
age: 86341
etag: "bc4a2dc43898e3fb78ba7301d8b09b280991d221"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10556
Md5:    0ab62c5a7c3296600de924eb0b283bc1
Sha1:   bc4a2dc43898e3fb78ba7301d8b09b280991d221
Sha256: f2a4c0829a4fb9a585113ed358832d16470ec391035a302a8f3c4666172f02bd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55f882f4-a410-42f1-919d-e59d9058875d.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7751
x-amzn-requestid: 577947ab-4fbe-4b07-944a-2b65cf5ed6d7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b4UE9GJ9IAMFVtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63799a1f-1a26961e20c88cd54a613ddb;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 03:08:15 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: QB2RJo7NR7FMDRC7fC9eLMW99KR7andopIeu4qi0yp_tihE0vtpkXw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 03:41:51 GMT
age: 64997
etag: "f3f2e5a8d14e009d0eaa3d7637730c4c525e3a9a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7751
Md5:    472ceca597feefba355fbd65998977b7
Sha1:   f3f2e5a8d14e009d0eaa3d7637730c4c525e3a9a
Sha256: e201f706ba38f04ef07d74a67eec187ad8b882027b96b0e4e700162f96da422f