Report - luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction

Report Overview

Submitted URL
luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
IP
104.26.12.55
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 22:11:18
Access
public
Website Title
(1) Alerta de premio!!! Programa de fidelización
Final URL
luckycandidate.com/page
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jouteetu.net	260109	2021-07-08	2021-07-15	2024-05-07	1.4 kB	1.9 kB	139.45.197.251
amunfezanttor.com	unknown	2023-03-31	2023-03-31	2024-05-07	1.0 kB	1.1 kB	139.45.197.250
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	462 B	7.6 kB	142.250.74.106
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-06	1.8 kB	101 kB	104.17.25.14
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-07	1.0 kB	33 kB	142.250.74.163
luckycandidate.com	367869	2021-11-23	2021-11-23	2023-12-26	16 kB	230 kB	104.26.12.55
lemouwee.com	176393	2021-03-12	2021-03-12	2024-05-02	1.1 kB	38 kB	139.45.197.251

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	amunfezanttor.com	Sinkholed
2024-05-07	medium	amunfezanttor.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4	1.3 kB	2024-05-08	2024-05-08
Pretty URL luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-08 00:11:18 Last Seen2024-05-08 00:11:18 Times Seen1 Hash 3d962d43d9d3bb3d3989774af0e01e2f f9d5a0460c0b5b0f8e37d10b958ff4454c72d1de 9d50583bd16d4d4bee3bfc91fdf2e010d9b3dbd9f9b2f6ce59e6fb9acd0669d3 Loading...

	luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4	182 B	2023-03-07	2024-05-08
Pretty URL luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 23:40:57 Last Seen2024-05-08 00:11:18 Times Seen10 Hash 0b9e1f4e4577c34cc8656d717cd19ec4 234efc08373bd5c329162e6fc3bd8f6a12ac0c6b fbcaa4477b55079d4258674ee457cdce4f0541460ef34ca2f140d3c73a76332b Loading...

	luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4	20 B	2023-03-07	2024-05-08
Pretty URL luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:22:04 Last Seen2024-05-08 00:11:18 Times Seen14 Hash 74fa864240eca70cdd3ca153489d7aa7 eeae1273bfddb2fb96ba9fc8baac9aa82ebc8800 c318f8b514d17b76bc09ac3da2b606f2ed707404754ecbb15ca79cd22d0e5582 Loading...

	cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.js	208 kB	2024-02-29	2024-05-19
Pretty URL cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-29 23:15:34 Last Seen2024-05-19 15:09:26 Times Seen58 Hash 4d456e43291a691699c12a9027f1f13a e2e691b338e64a94e68be7f4d2aded08fcca0759 9a4a11a15db88d5fab08f59c1c34796b03f1f15bb3cc928dd226e1c59f7f59a3 Loading...

	luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4	638 B	2023-03-07	2024-05-19
Pretty URL luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 23:40:57 Last Seen2024-05-19 15:09:26 Times Seen27 Hash d33e088291f168e501e8fce777703da4 54e662e52cb4ffc32bf2c0bc4856defdc88b5107 1fdf9d0ff650012045283b3da64c5a1ed35d063352025829de464ad1529d7c87 Loading...

	lemouwee.com/pfe/current/micro.tag.min.js?z=4678540&sw=/sw-check-permissions-d76d7.js	37 kB	2024-04-25	2024-05-15
Pretty URL lemouwee.com/pfe/current/micro.tag.min.js?z=4678540&sw=/sw-check-permissions-d76d7.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 13:01:48 Last Seen2024-05-15 20:42:51 Times Seen2522 Hash 32d6dbd00a639e2cd10d1704b9159bd5 0dab4c95675393f1d0e13d20f13d80ee12e41d95 9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js	88 kB	2023-08-31	2024-05-19
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 16:03:19 Last Seen2024-05-19 21:18:08 Times Seen9848 Hash 2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a Loading...

	luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/particles_fly/particles.min.js?v=1.14	23 kB	2023-03-07	2024-05-18
Pretty URL luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/particles_fly/particles.min.js?v=1.14 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:44 Last Seen2024-05-18 22:59:12 Times Seen1748 Hash 00debcf6cf0789a19cee2278011afcd4 8017f8b1869077db728573f1ca4684a00af69462 faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6 Loading...

	luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4	2.8 kB	2024-05-08	2024-05-08
Pretty URL luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-08 00:11:18 Last Seen2024-05-08 00:11:18 Times Seen1 Hash 3de478fb1107687ce2ba786bbce946e5 873fcb871e978efdbf2b392c0c43f9b3fd19c2b1 f462c281e3d82cdcb3bdf53c6e505283e125b4a2200ea204a8feabe44c9ff5ad Loading...

	luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/surveys.min.js?v=1.14	3.1 kB	2023-03-07	2024-05-08
Pretty URL luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/surveys.min.js?v=1.14 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:40:57 Last Seen2024-05-08 00:11:18 Times Seen14 Hash 2c0d1ebb920c04a4a2687532ff5ecb26 220cdd2e88258bf3b1318d6a8581d5f45e99c08c d280128d65ef9533b5237c67d89064bfd9910fc31c8fb024782db20b9b78f0ed Loading...

	luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4	214 B	2023-03-08	2024-05-08
Pretty URL luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:18:15 Last Seen2024-05-08 00:11:18 Times Seen9 Hash 058534ad109b88ae2332411eb2b0f32a 11f8033dfba33ed6c1704c2bfed1abf270794600 154d65e318e5bf797834d923faa5c979bc9a2aede66497f513a9146e473d2ac6 Loading...

	luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/preload_o.min.js?v=1.14	18 kB	2024-04-24	2024-05-19
Pretty URL luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/preload_o.min.js?v=1.14 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 01:24:08 Last Seen2024-05-19 15:09:27 Times Seen30 Hash a32d40b2f01f5a74c8077e46a4a8a73d 7abaeaf47545c71abc18c731d7bdfcbabcda087f b55e30ce0e6f42daacd35842c1edfc675673aa5d436a26ff8d8b796932ceda6c Loading...

	luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/box_o.js?v=1.14	4.2 kB	2024-04-24	2024-05-09
Pretty URL luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/box_o.js?v=1.14 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 01:24:08 Last Seen2024-05-09 22:24:07 Times Seen14 Hash ab4a9bc2c2681107a38e0f82e0d6508d 6936769e72f22df7bbc6d30495ddbdd6fe314fe5 361ee89ad0d7a524dc000e4dd95b8f9b07361860882b56c25c82f309f542f5cc Loading...

	luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4	757 B	2024-05-08	2024-05-08
Pretty URL luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4 IP 104.26.12.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-08 00:11:18 Last Seen2024-05-08 00:11:18 Times Seen1 Hash df00f4ec7f04b2a2df0a806100f6c83f caa2713e3a4ff889b8c4d9417acbb97c21b9a28d 48b81ac41a089e0b3aaa4f0b68856909c6c153bf7bae310e3b5da0dd8cbd74e7 Loading...

HTTP Transactions (40)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js

104.17.25.14

200 OK

27 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
27 kB (27446 bytes)
Hash
2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

HTTP Headers

GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 11318
expires: Sun, 27 Apr 2025 22:10:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yaw6ItImCF7EJRYHtPuhjQsAJXj9bMoV%2FdDPVEETlKF445tlkbx40Nosoc839yOrea6m9Y92X73%2Fvybq6Q7RFhhZYC1cL01Dz2s37DHDDjGvs1j6uFki5VATWmZRmo3C3DFC4T8B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88048ae04bff1c12-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.js

104.17.25.14

200 OK

36 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (620)
Size
36 kB (36257 bytes)
Hash
4d456e43291a691699c12a9027f1f13a
e2e691b338e64a94e68be7f4d2aded08fcca0759
9a4a11a15db88d5fab08f59c1c34796b03f1f15bb3cc928dd226e1c59f7f59a3

HTTP Headers

GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 36257
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65d4c5f6-8da1"
last-modified: Tue, 20 Feb 2024 15:32:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 625766
expires: Sun, 27 Apr 2025 22:10:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EH9rSLc8lz6CHb0UmRLHJDijK4qyHWrDaiJBADN3wjtl3UIoNcn6GtvuZHRJpWrKAqvUsak7sVbyYXeKr%2BUXvrep%2BSjnZ6y%2BLzYqI74BKpTarfsre1ULPmhFZo%2BYngwrKTPHZHOU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88048ae04bfd1c12-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/css/bootstrap.min.css

104.17.25.14

200 OK

23 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/css/bootstrap.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65342)
Size
23 kB (22709 bytes)
Hash
a549af2a81cd9900ee897d8bc9c4b5e9
c5ac1dee961cb59a045256ec203f69e317872f7c
3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8

HTTP Headers

GET /ajax/libs/bootstrap/5.3.3/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: text/css; charset=utf-8
content-length: 22709
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65d4c5f6-58b5"
last-modified: Tue, 20 Feb 2024 15:32:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 611911
expires: Sun, 27 Apr 2025 22:10:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xb8fNAtuzs2wO77M8moKzYOb5X1vN9ysE0SrA13BTUjwpYJ5RYBaSqo5VzDXR1lqRX9sdc87obfoNEdz%2BG77VVw0C8tNChFfQX1wGcnE4aIcs8%2FQyYyklu2DdsTjzr%2FwqFCP6d%2Fs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88048ae05c011c12-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css

104.17.25.14

200 OK

10 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (59119)
Size
10 kB (10462 bytes)
Hash
ecd507b3125edc4d2a03aa6ae5d07da9
a57ee68d11601b0fd8e5037fc241ff65a754473c
99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e

HTTP Headers

GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: text/css; charset=utf-8
content-length: 10462
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "613fa20b-28de"
last-modified: Mon, 13 Sep 2021 19:10:03 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 617553
expires: Sun, 27 Apr 2025 22:10:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uee2yzxmFMO03EM89weO25cPNxrGcWncfI5QLdLpTxB4Q50UIXnvYN3e%2FzdMCEupYea9jZyT0ZRDJLd1qd7ePkDXdFoO%2BHbasdDaIDLz%2FE2hho%2F2Afp3Seg6tqEj2lSFLCn1747%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88048ae05c051c12-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.163

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 10:46:32 GMT
expires: Wed, 07 May 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 41060
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.163

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:08:19 GMT
expires: Sat, 03 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 403353
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/7-1.jpg

104.26.12.55

200 OK

5.0 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/7-1.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 189x139, components 3
Size
5.0 kB (4968 bytes)
Hash
63f097285edb8c470093f61a60a6ac0b
0aed33dffad3e2bfbce1ee4dd84e39308a1a362e
8136691d16f75c0ef19d620e3b5a282b6165dcf9ad9349d8f5c8d274676fad6c

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/7-1.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 4968
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-1368"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cRCld48%2BO%2BPGkm%2FeLfRDTYCK2IjZPySswuroS%2FNe0fgIx7ivHYEo4RBGAjBiA4VHLDpcjxGEGMHlCt25q2MOioBlkVtAnDJRE%2FLaJ0r2nDfy%2FORvNFiH3fpOycm8JhbsozlGYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae33a395687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/4.jpg

104.26.12.55

200 OK

1.7 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/4.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
Size
1.7 kB (1677 bytes)
Hash
8c089263b17cfddee9492f6000177855
a8417ae3eca5bc544a910ee7df091da3fcf33539
e538b5e335a93d46d097d8a4111812728cb270ffd417fc9365ca0648358772c0

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/4.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 1677
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-68d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OaKVComD%2B1TqHssZ1cKGns4JGGHtUWDtI7lg8t0HXOMrDlRlCIW5qbyfA%2BZ4Apzg87KdwOen1O2Uk950j1exQ%2FAIcJVhSNvT41HuCbeMulQtfa0L1HBAbCCbZD7mYohycTH1Kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae33a3b5687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/like.png

104.26.12.55

200 OK

466 B

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/like.png
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced
Size
466 B (466 bytes)
Hash
0d9c764991a1ebba259ce1afc777c756
fedbba216589a0a40fabb2e0cb24911e663e679e
7adac1888791ad42f547c97c9c9dad37faee15dfb5e76f20eabc8a0a0b6168e9

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/like.png HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/png
content-length: 466
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-1d2"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=waPE9gN8a2JPfanohJMAy5eFJJ7EzponyoMtN5fJjywXxZ10IM5yKHdd7FALNtVYSnu6peRIM4Cu6nPtyywOJ9ymO9EWLvY8P%2BU46Wqr%2FqEBDX3bq6GhNP7kAe93EH9Y7QaPaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae33a3a5687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/9.jpg

104.26.12.55

200 OK

1.2 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/9.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3
Size
1.2 kB (1184 bytes)
Hash
35e10bdf2aad262c882f5cbee5eec790
33538ef901929efc277d05be92eb11ec41e28485
59d9e6d697bfc8a9e3731682cc1e72738711e72818a0f2727b6acf836f12aedb

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/9.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 1184
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-4a0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bl0AZQj8azeQ0i%2F8ylJ0LFNcV0o8uwb96PmBPgxwywV4%2BIg0xTZHh75PxP0wnEFgd%2FNOYx1WS8sogOypchVI8Ieb0QaCgcw6RI07vtZ23CCjoY6J41R88M6LQ4D6QsfhSmobLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae34a4e5687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/8.jpg

104.26.12.55

200 OK

1.5 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/8.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
Size
1.5 kB (1536 bytes)
Hash
84139cb9b3016ecb40d9a6dc47580e66
e8c1d00ae23f5eda4301065a35ecccca75a73587
a99219aa164b1c4df4bff23fced397a91f6080ac8a5fd40a9a8c87a0ed38b251

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/8.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 1536
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-600"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vuTX3VulOWO0hWj2krdUtjTmd9ixvxjmoebqQZ9NeQ9TRkfnf9ohKgbmEzR7m%2BYioF48rD7EFOpr61mHn7ZJ4jSTV3V2rqPqX3UDD6h0R%2FE9m%2BleQQgJ6OLFGZ%2FjShJoYkjVGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae34a495687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/3.jpg

104.26.12.55

200 OK

1.4 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/3.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
Size
1.4 kB (1358 bytes)
Hash
e474c726004db45c7e83d9375021fecc
b262903aa15e07c3f1a506c92de6ef961dff02e7
1ba149af1797f2cb849200f025662854daf0ba8de8ea6b988bd3a4275a456e55

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/3.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 1358
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-54e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FdhGJMo5mBtCsyOdtkUPrrbkE2i%2FnZgdbKUGkfCTgcP1v06988UjGPZZPYYFHAiwUtu7cZ6gsw9KUjttSWn%2Fc5wUwQgRsJ3rqjk%2FS6HnnXjBVugwJQt9E%2Fwd3jUMAfp%2Bty%2FLTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae34a4c5687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/2.jpg

104.26.12.55

200 OK

875 B

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/2.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 40x40, components 3
Size
875 B (875 bytes)
Hash
5c6543cc0c9a84d141405bf0dfbc570f
4d43ff3884fa8edcb9adfa053525e912bb1baa2f
73cb358bf47ed149f8fd7e3eada678166cfab77538c313ba72cb6e38d13253fa

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/2.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 875
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-36b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bT5X%2FpCJxNRWIn8RpHXbVj9N0J8uPu9bSD0OJlSx6JmJcPZhayxjWEPdVGU%2B1xbJJPK3YXxq87SkPxwV1ncnazrhIhzdX7kmwg4qcyKUFIS5EKZOGKz4zo%2FqK08HYswkBIARtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae33a485687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/7.jpg

104.26.12.55

200 OK

1.2 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/7.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
Size
1.2 kB (1151 bytes)
Hash
1f9cc7568cceb0c3eb1e080b51639681
89ceb64fe9b651a622f713607f24a87a4d8c960c
98cb5f8e726280a710d21e7648523a17a2e5924623a171638a4c676f9ac49e29

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/7.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 1151
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-47f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O3zrPcWlb%2B9cufeEtb0a2rQoLphvDlWgxKEm0DzKr7k2noxy5QfxnISTVLEQLDYgH%2BZtJmpt4hW1ZjRfxRCdcSQz1uE5fw3MdLGKibz%2FCcc%2Fk9I%2F3XGXrgY3TorZAbiXSKJi1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae33a375687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/6.jpg

104.26.12.55

200 OK

1.8 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/6.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
Size
1.8 kB (1764 bytes)
Hash
42ccfd533950b5a739ae72144bf2e36e
fc400305aad0eeff417f938e75bd78b8ca572937
385c67cb8b66fc4c29d217c5e25e8c84a98ba29e05359f9db462870ea4b405a1

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/6.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 1764
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-6e4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bbMf3Jfgn8pJweeVoNLNRPw8EJgFBxCA2QqT0ex5iGQbNfsMdLVYkBmbQMQc%2FPoo9StSJheYnzn6MA9tde4K5EjRihwk1er4lcVrrqN%2F6NwxoPp5%2BqpcVCgeNC4Vumbj8glq%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae34a525687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/1.jpg

104.26.12.55

200 OK

1.8 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/1.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
Size
1.8 kB (1822 bytes)
Hash
9a5941baff721c8a33218d726f4198b9
df9c14ec8fe0ca06dc8cdd6d4fa109cc11f9a1c6
d8a2137683e9900941d4fcabea547cd822ce016bef44a224a653d60940b269c0

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/1.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 1822
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-71e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=67v4DQF%2FgzRCVojvc4UEC33BuHSr6%2FH3Rk4NLtHPPmO41NIjD0A90%2FV%2B6nGZWtpqXOMFEYdyaZEbuvJ4mWuppYABTcEsqvRBSlbKhmJRdSvHewwHz7bGiRUE44n2L5jVHjb17Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae33a475687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/preload_o.min.js?v=1.14

104.26.12.55

200 OK

6.9 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/preload_o.min.js?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JavaScript source, ASCII text, with very long lines (17559), with no line terminators
Size
6.9 kB (6946 bytes)
Hash
a32d40b2f01f5a74c8077e46a4a8a73d
7abaeaf47545c71abc18c731d7bdfcbabcda087f
b55e30ce0e6f42daacd35842c1edfc675673aa5d436a26ff8d8b796932ceda6c

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/preload_o.min.js?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-4497"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ko0BGsxBwR%2FaPq%2FlSQ8tbBq4wbt%2FYqwlxw2i2qlSLBJ%2B08dxxyNs1lQSFiqbTp%2BYcorFF55o%2FwBc%2BVPi4fiXR9lfCy%2FoxLVTUfCm%2BaGlFXA%2F3CDoC8%2FHV1%2FJQDX%2B5J6GztvRSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfc8035687-OSL
content-encoding: br
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/comments/comments.min.css?v=1.14

104.26.12.55

200 OK

6.0 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/comments/comments.min.css?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
ASCII text, with very long lines (1038), with no line terminators
Size
6.0 kB (5976 bytes)
Hash
3471b1c397b0e3c7e0260710d5a8f381
4fc74a80a0f932659c40c8b8963d8fe525de49fd
ee0febbabb76a8bd117697143098287cf4554865902ce18d4aa8cadbf984721f

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/comments/comments.min.css?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-40e"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6DfyMNi1TcmiAmVw3KycdKPO1aA04PG%2BTiFiXNw7xk0FD5Ptvrbzuqb0uLbDCLa4QsT%2F9BgZSaN63SbdynbWge1tJpS5e2Imng3XAm13n90EAaoSWdyQ02piUtdoF77t68XezQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfd8155687-OSL
content-encoding: br
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/sur/sur3.css?v=1.14

104.26.12.55

200 OK

28 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/sur/sur3.css?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
ASCII text
Size
28 kB (28431 bytes)
Hash
3f9401a877cb75e550c646959ecd1343
038fbca8d375d51e01c312f19d18c34b93e17762
fdbeabb5b3aa977fa4416df3852acbf9fadf5755172a059961dc1ba72bb1d345

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/sur/sur3.css?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-18b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=REnQj1TJEQ5jUPWqjGev8VbqmrDjnbQoHN2qr5Lm7y%2FOkB8tgTf3Be5Gb3vnFZ4nhkuZBcuzbaRWd3nAGP6TpGI083Qm7D%2Bvlo6qeO8RnhRHCZXf0RNvxeesfMha2Ax5M5f28w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfc8065687-OSL
content-encoding: br
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/survey/survey.min.css?v=1.14

104.26.12.55

200 OK

29 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/survey/survey.min.css?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
ASCII text
Size
29 kB (28739 bytes)
Hash
6c9276f3d527ee8da644994a6ce48cca
eb107297ac31f1410aa5ba830d8035ccd2ffa837
c714c752c8a7825f5993e5507190117ccf63ade68d44d455efcdd81c85ac7d48

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/survey/survey.min.css?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-575"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j49HCFzhnufYObfXfnNIWkBKn8AHPAP6f0e4B2VeSWlb2dfZyLzvw781c0MYNtfnIpKlee95BkKvoVhAuplb11aGRb%2FYM2HxTlDDXY%2BWyzTuQzcj9TfU2oaGDhrYu95eUAKoAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfc8075687-OSL
content-encoding: br
X-Firefox-Spdy: h2

lemouwee.com/zone?&pub=0&zone_id=4678540&is_mobile=false&domain=luckycandidate.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=2faf1e71-31d4-441d-955c-cc3043c5f593&action=prerequest

139.45.197.251

200 OK

0 B

URL POST HTTP/2
lemouwee.com/zone?&pub=0&zone_id=4678540&is_mobile=false&domain=luckycandidate.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=2faf1e71-31d4-441d-955c-cc3043c5f593&action=prerequest
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerLet's Encrypt
Subjectlemouwee.com
Fingerprint79:AF:F5:E8:1A:28:27:C6:45:D0:92:C8:F4:67:CA:3A:79:D9:A7:B8
ValidityFri, 05 Apr 2024 05:06:29 GMT - Thu, 04 Jul 2024 05:06:28 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /zone?&pub=0&zone_id=4678540&is_mobile=false&domain=luckycandidate.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=2faf1e71-31d4-441d-955c-cc3043c5f593&action=prerequest HTTP/1.1
Host: lemouwee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 22:10:52 GMT
content-length: 0
x-trace-id: aa3c6527885ed604da76ff9cc6404121
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://luckycandidate.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/particles_fly/particles.min.js?v=1.14

104.26.12.55

200 OK

6.7 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/particles_fly/particles.min.js?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
ASCII text, with very long lines (23002)
Size
6.7 kB (6692 bytes)
Hash
00debcf6cf0789a19cee2278011afcd4
8017f8b1869077db728573f1ca4684a00af69462
faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/particles_fly/particles.min.js?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-5b44"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O4WBAgBDQMEudba7RYdut%2B1U%2FDe0bO6el3vaLv9avtpznWWBfqptQ4kYabyARMGYnuMvc5csMr8kkiLtZGxztdYozNKQ6wq9BlwSjO8lQE7KxgAq0VBoyJKgiRbzdV1Us4UHog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfd8175687-OSL
content-encoding: br
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/favicon/favicon_7.png

104.26.12.55

200 OK

301 B

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/favicon/favicon_7.png
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
PNG image data, 21 x 21, 8-bit colormap, non-interlaced
Size
301 B (301 bytes)
Hash
50130d198f59f86a3c4324b1d9d71d37
fc77facb34c59ddf37a88ecbf78f9616b0fa6365
2d6f99da19fb15cd4cc506097dc5fb717f8a7dc116939f2f1cf291ae0c8f0282

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/favicon/favicon_7.png HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/png
content-length: 301
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-12d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c9sVDexb%2F91p8qdy099Rw%2BDT8qP2mhNKf5GwcUKqV%2FDdULqrqACEu7X9wSqN4Ds5CyiaaNF3K%2BJfw7CSfBBOFjmm%2BdoNM94aKcXbMp%2FExNLZLWRZ84t3l90AYxeY%2Fd4EpHeGwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae5bbe45687-OSL
X-Firefox-Spdy: h2

jouteetu.net/custom

139.45.197.251

200 OK

39 B

URL POST HTTP/2
jouteetu.net/custom
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerLet's Encrypt
Subjectjouteetu.net
FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65
ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT

File type
JSON text data
Size
39 B (39 bytes)
Hash
058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881

HTTP Headers

POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 391
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 22:10:52 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: cfc76dbb832adaf9f69a8e356e489a3a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://luckycandidate.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

jouteetu.net/custom

139.45.197.251

200 OK

39 B

URL POST HTTP/2
jouteetu.net/custom
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerLet's Encrypt
Subjectjouteetu.net
FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65
ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT

File type
JSON text data
Size
39 B (39 bytes)
Hash
058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881

HTTP Headers

POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 393
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 22:10:52 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: aa38d892c854fe161a1141d556d0b7d2
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://luckycandidate.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

jouteetu.net/custom

139.45.197.251

200 OK

39 B

URL POST HTTP/2
jouteetu.net/custom
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerLet's Encrypt
Subjectjouteetu.net
FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65
ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT

File type
JSON text data
Size
39 B (39 bytes)
Hash
058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881

HTTP Headers

POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 394
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 22:10:52 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 8593f55ef27baa4bfef407277bc7f61a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://luckycandidate.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

amunfezanttor.com/event

139.45.197.250

200 OK

0 B

URL OPTIONS HTTP/2
amunfezanttor.com/event
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerLet's Encrypt
Subjectamunfezanttor.com
FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA
ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://luckycandidate.com/
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 22:10:52 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://luckycandidate.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2

amunfezanttor.com/event

139.45.197.250

200 OK

94 B

URL OPTIONS HTTP/2
amunfezanttor.com/event
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerLet's Encrypt
Subjectamunfezanttor.com
FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA
ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT

File type
JSON text data
Size
94 B (94 bytes)
Hash
fca793d877b1a69d80773d4ca594fd8c
14487aea87defe8afeb743a1dab624fdc7d32de0
352ba2384e42cff64d911ae6a2f05714f62069d07c941ee052bfe4b4a56d592e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://luckycandidate.com/
Content-Type: application/json
Content-Length: 1011
Origin: https://luckycandidate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 22:10:52 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://luckycandidate.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Roboto:wght@400;700;900&display=swap

142.250.74.106

200 OK

7.0 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto:wght@400;700;900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (7193), with no line terminators
Size
7.0 kB (7004 bytes)
Hash
c57dda42e147d534c4425d1a6cf618e5
eb64157c4ef177493086e723d5698d8f2b6b3709
18146c688d3c8e77c146776b6e3927c0805f12ef86db5b9d4a3929b917b39564

HTTP Headers

GET /css2?family=Roboto:wght@400;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 22:10:51 GMT
date: Tue, 07 May 2024 22:10:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/5.jpg

104.26.12.55

200 OK

1.7 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/5.jpg
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
Size
1.7 kB (1675 bytes)
Hash
c0892bb8f11f3deb28818b549b852856
aaa408f848633b9e821d73d2696dc6f7158ee4f0
edfc07ca5d2fa100ca42b31b757da0c38a51fba2b909862622dd474c0ce7c6ba

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/comments/global/5/5.jpg HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/jpeg
content-length: 1675
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: "6638a72f-68b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ADdC9d5PFSuyGi%2BKjc0gWbSVp3i5XwqQarPaFA4hr63edKPwBVZ9eD4uNm5jJ7B7g94rgAhquRH1rioeZTsakmjmIfrRjZlCZo9DKM34W%2F7zKktE8l8Qk6DmgWHoBK%2BEdX4CyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae34a505687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/euh7mcpsj3.png

104.26.12.55

200 OK

28 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/euh7mcpsj3.png
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
PNG image data, 480 x 350, 8-bit colormap, non-interlaced
Size
28 kB (28217 bytes)
Hash
455daaeb94d9644a50c0a745c3df20c5
336555d2e1a2e03851b5bb90183f2770970365a4
6629e831b8fb47bdd5226ab0a2ce9759647bba6cfa377aab46d45801ceb5b185

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/euh7mcpsj3.png HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/png
content-length: 28217
last-modified: Mon, 06 May 2024 09:54:22 GMT
etag: "6638a8ce-6e39"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D7CqHqA7sFoYBzJYy3r4Xn05vJGIzhlLHyHTH%2BFHKz0a5KTX9CI6PfFo94GDSp1%2BXfjx55rKf4XNeAgQEdoPp9O%2B0d0aXP%2FORq01MRh1bfe5O8ZNiYxoDvDWLW17bqxJPcYC3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae34a545687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/a48k6le9pr.png

104.26.12.55

200 OK

28 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/a48k6le9pr.png
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
PNG image data, 480 x 350, 8-bit colormap, non-interlaced
Size
28 kB (28217 bytes)
Hash
455daaeb94d9644a50c0a745c3df20c5
336555d2e1a2e03851b5bb90183f2770970365a4
6629e831b8fb47bdd5226ab0a2ce9759647bba6cfa377aab46d45801ceb5b185

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/a48k6le9pr.png HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/png
content-length: 28217
last-modified: Mon, 06 May 2024 09:54:22 GMT
etag: "6638a8ce-6e39"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2vEwQ%2B3QJ5MVCk57OMaJbChU%2FFnhyv7jUaKW6qdhKuNH6ggK8iGXBNRbJ4Nkc%2B1JDH1uYxFOhb0UXa5K3ADq7HjbK8NihpQBOJ6fpHX%2B0B8KIaiCf1YSa8jqZHnG7G9297VaJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae34a555687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/seasons/156/element-fly.png

104.26.12.55

200 OK

5.7 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/seasons/156/element-fly.png
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
PNG image data, 80 x 70, 8-bit/color RGBA, non-interlaced
Size
5.7 kB (5682 bytes)
Hash
d09df17e832eca94c335ab0926b2a96c
be0b7c2fa25ffe14dccf427a534bab7049fa0762
dbd45b605e46ecf62fb35d82868e8ccb9346600fea8223db8719c1e7b00fca42

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/seasons/156/element-fly.png HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: image/png
content-length: 5682
last-modified: Mon, 06 May 2024 09:54:22 GMT
etag: "6638a8ce-1632"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FdeKAyYPddtYaUDqriYJAs8h9k%2Fvh%2BN4rOU1iboQYeNSgHVPc%2B1Y9VUdE%2B5X8QIR6iKD5G484vLBaXSMGpw6U%2FDfURGgSxveu01yz93pBZD2Sip8LI%2BHSo8Et1YYQ0jPq2%2FPVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae38a6e5687-OSL
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/surveys.min.js?v=1.14

104.26.12.55

200 OK

3.1 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/surveys.min.js?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JavaScript source, ASCII text, with very long lines (3285), with no line terminators
Size
3.1 kB (3093 bytes)
Hash
26142b6db119a9168cea94e306339502
bbbd8472abef273b86db14924c00c55980903a10
1ca6ef8234eb6993e6abc6c4d5ff126f771d57de3339a3224145183133c56fdc

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/surveys.min.js?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-c15"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wg0%2B8HjM4GdFrpJXN8xKoZtn7reqfWooUIMijMwUprPhipFxKX1R%2B6wppvJxIC5ojx7y3MXKfUIOeLu5UXJ%2BEialreR6xhQU%2BdDxdBd%2F6%2FlF5ek3wMnmdVhiX0UTKrOw2xl7xg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfc80b5687-OSL
content-encoding: br
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/box/box.css?v=1.14

104.26.12.55

200 OK

3.8 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/box/box.css?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
ASCII text, with very long lines (3972), with no line terminators
Size
3.8 kB (3757 bytes)
Hash
4458391c7af68f2fdcbd3f0fa5c1967a
a311e940691a14dc4b7d2af770aa64670b8d3cc8
518beebf91d2b89bb614b57ed2ede8fcbda1adf430b380fde3a030cc516940fe

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/templates/box/box.css?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-ead"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pZ6y36t%2F9x%2FGu9ZnBQnmDaMHD1LyaR%2FNvaNdkyZDZ8K3rZNdOhx4pS9jxfdQZnHy2EE5SZnfFf2HjWvfPRFrAZeGd4u5VmJZO%2B8zYVHMOZeMJJb2AA3RrZIOICSwjLUArqto7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfc80f5687-OSL
content-encoding: br
X-Firefox-Spdy: h2

luckycandidate.com/sw-check-permissions-d76d7.js?zoneId=4678540

104.26.12.55

200 OK

566 B

URL GET HTTP/2
luckycandidate.com/sw-check-permissions-d76d7.js?zoneId=4678540
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
ASCII text, with very long lines (605), with no line terminators
Size
566 B (566 bytes)
Hash
871de2f2c571068c5f3bbae2bda24077
3a99619a58792eef36cd082624a83bb93d5ef1f9
7c7286e7e9d85a116cc12ab22d20d3fcb7c8e6af76b789ec01b5e12ff21dd962

HTTP Headers

GET /sw-check-permissions-d76d7.js?zoneId=4678540 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:52 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 08:49:11 GMT
etag: W/"63d23e87-236"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ARwoXNg95og9J8H19B8t9Wg2t80oKzKHYUQJqbCnc5fCHj1BofgSFHpe0%2BciQTyLoMdgbc9SlNBiHlZo%2BykPb59ZZcMrmcndcGX6OmYiI3J7%2BgMLYzWBiCvp8q6SxNzXGU0kyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048ae69cba5687-OSL
content-encoding: br
X-Firefox-Spdy: h2

luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4

104.26.12.55

200 OK

36 kB

URL User Request GET HTTP/2
luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type

Size
36 kB (35532 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QrFvodccYTvw2618%2BwC3X0as%2FiWWxSRPy8qEeCWpMdlZMfrLnaL2nq2eWrO4T8YSPOnrQScRhZQNUlw0ypfR%2BSMnrJanEcuNxc4UgdsyV8JGnufKIryLATXN%2BiXAobV6XnicRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88048adbcdaf5687-OSL
content-encoding: br
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/css/style.min.css?v=1.14

104.26.12.55

200 OK

8.0 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/css/style.min.css?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
ASCII text, with very long lines (7965), with no line terminators
Size
8.0 kB (7963 bytes)
Hash
2262c2e53a8b322777b6eb511d29af7c
a29de156da1bd664d0efa52a29a99972876875ed
332d038e0a8f9aa4d78be40da4977133f4679121160024b2590f8f513afcea44

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/css/style.min.css?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: text/css
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-1f1b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xQyt9Loz3f%2BSLKgsbT2Xv6K0tAMnEDZ%2FgrA%2BtAuWVf9ykYGv6Kr%2FO3cmKhMKy%2BjxKAzqED2VeWF1twxfdbmQTijmnMtaR9DnZEoWl9dF0rIdmKJFm%2FO3BrJo39BjTjoFCgBySQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfcffe5687-OSL
content-encoding: br
X-Firefox-Spdy: h2

lemouwee.com/pfe/current/micro.tag.min.js?z=4678540&sw=/sw-check-permissions-d76d7.js

139.45.197.251

200 OK

37 kB

URL GET HTTP/2
lemouwee.com/pfe/current/micro.tag.min.js?z=4678540&sw=/sw-check-permissions-d76d7.js
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerLet's Encrypt
Subjectlemouwee.com
Fingerprint79:AF:F5:E8:1A:28:27:C6:45:D0:92:C8:F4:67:CA:3A:79:D9:A7:B8
ValidityFri, 05 Apr 2024 05:06:29 GMT - Thu, 04 Jul 2024 05:06:28 GMT

File type
JavaScript source, ASCII text, with very long lines (37142), with no line terminators
Size
37 kB (37142 bytes)
Hash
32d6dbd00a639e2cd10d1704b9159bd5
0dab4c95675393f1d0e13d20f13d80ee12e41d95
9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=4678540&sw=/sw-check-permissions-d76d7.js HTTP/1.1
Host: lemouwee.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 22:10:52 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:51 GMT
etag: W/"662a3513-9116"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/box_o.js?v=1.14

104.26.12.55

200 OK

4.2 kB

URL GET HTTP/2
luckycandidate.com/assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/box_o.js?v=1.14
IP
104.26.12.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Certificate
IssuerGoogle Trust Services LLC
Subjectluckycandidate.com
Fingerprint7A:E6:8D:3F:2A:AC:6D:FC:24:30:A1:AF:93:1B:B5:DB:88:B3:E4:35
ValidityMon, 18 Mar 2024 01:53:28 GMT - Sun, 16 Jun 2024 01:53:27 GMT

File type
JavaScript source, ASCII text, with very long lines (4184), with no line terminators
Size
4.2 kB (4179 bytes)
Hash
540bfe138c793172e999f49b394ee71e
d9bd4b33fc83ba9c878365eb93b214f0e8f1b44b
b38ef2303ee7080d8fa982a22f79ebbfc138ac7f69bbc27f2d61ed1c9d60c7f1

HTTP Headers

GET /assets/17gs9ur/mxtar249-wlmrtbillete1t6rjlm/500/assets/js/box_o.js?v=1.14 HTTP/1.1
Host: luckycandidate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luckycandidate.com/page/1t6rjlm/500?cost=0.003800&currency=usd&aff_source=5615727&request_var=09l4IZ2bde&aff_transaction_id=811833527124365312&campaign=ThQhJP4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:10:51 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 09:47:27 GMT
etag: W/"6638a72f-1053"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PJy3g7pYj3NnEQLIO%2BgLHV0TyNW72gWIXsBHnA3kKk45jA59MFreYo37D4cHt93xwxl11iI5%2B8q1FE4Mgn8BOv18CYoHfSjB%2B3IVk5SS1Ny5I2OzpiMMyx7PNgZ6L4%2FrW4wJtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88048adfc8135687-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML