{"report_id":"52549cf0-a791-4122-a47b-c1dc533c1298","version":6,"status":"done","tags":[],"date":"2025-08-01T10:29:39Z","url":{"schema":"https","addr":"duckfed.com","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":0,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/index.html","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"title":"Duckfed - #1 App Store for Tweaked Apps"},"submit":{"url":{"schema":"https","addr":"duckfed.com","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":0,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-05T10:29:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-07-30T15:12:44.837685Z","alert_count":0,"request_count":1,"received_data":332720,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-30T15:14:12.092299Z","alert_count":0,"request_count":1,"received_data":30756,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":5110,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2025-07-31T10:54:52.696186Z","alert_count":0,"request_count":24,"received_data":2813959,"sent_data":10488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"duckfed.com","ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":19,"received_data":2030853,"sent_data":9293,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-30T15:10:27.969323Z","alert_count":0,"request_count":2,"received_data":98332,"sent_data":1122,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/index.html","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd8bc8bef9d0d0df8b31d2f8aaf62105","sha1":"79589e08cf5feaf4fb66278d0898e5e67ed2e387","sha256":"bfc46349ccc1bd02056e4301762d90ea3877c6f2e7989ead238a6bb31a1c730d","sha512":"d79b429226c3f3688c11eb0a027810d9fa7297c8ef8b4282645e08927572b83188cf6d8062da2f32a06d0605b4ec7f8a8e91349159560ef6328c5f67046532fb","ssdeep":"","tlshash":"1af05c0dc6db0261081f38e6754d01453db2f0431c39d986798c7f405f8243a81efee9","size":441,"data":"","first_seen":"2025-08-01T10:29:49.590618Z","last_seen":"2025-08-01T10:29:49.590618Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1ff1650bba6e39089834e708129d723","sha1":"7d1cea058027485e9ccf1a92e38823acb05c0659","sha256":"7dfc3ef73c1284c7aff3c5cdac3812d212c8b899037d7860c8ba20a1defb9a7f","sha512":"94eb43018f4a313d561fd171e894ae64b1f18c2f30988071b0d14bea024f686eec2c856848ef720ab6963b0a8b2d7fadc6c3b0d21d9c1ef71426524fbcc968b7","ssdeep":"1536:9RCJ6/KpVsnUMxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277a:9j/FjzarzCT71Pts","tlshash":"e133a5497ce771264a13f0aa67ef7445fa26c42b2315d440f89e432c2f91f6442bdeea","size":51351,"data":"","first_seen":"2023-03-07T01:10:20Z","last_seen":"2026-08-06T00:40:49.144234Z","times_seen":2381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NZD0ZCXE6Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa92756b525c47fd01eca08966d4f4b7","sha1":"724785d08153e9c512e2ecce87f3712ffdf6026a","sha256":"ac53cd82b3802703044f4667652426326a6809e2e661f96a7452af31d414dda2","sha512":"95e4045b20e38d6581daf7dbd7ebf557a93aa0f0c53b7d8dac4a7e4da13377d606bd595427fc5e6b01fb4e708c4c0407a13f430704d4c83055514e4964ce9739","ssdeep":"3072:mEtSeWKA8xwym0Ro1IYfz0ce38JGXbrunAIH1EMHsNklKZtcRWaWU5Fjt2YwrybA:ggvm0ZgHnCklo9aWU5Fh2nrmwGS","tlshash":"0d6419cd73d6b46683a2b478503f014ba17b7a92f84cc894f186d8e42e74aa94177f7c","size":331719,"data":"","first_seen":"2025-08-01T10:29:49.56323Z","last_seen":"2025-08-01T10:29:49.56323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/js/custom.min.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f6c6160c1f3e9a463614c054d86f568","sha1":"529a97952c5529ff5ee00d6b93b326267b21eb4c","sha256":"c0e1cf23abeb99735a3ad6e855d2fd644a8dc96ea23819a9cdb5838f844229e8","sha512":"c98f6c7ec05d32f9726f0b83c42eb68037c5b3ad71c0a590b812e5315dc9ac505caa3023b286b654c0da81bd1a1a3d2404d738b658539e185f269951c7e49661","ssdeep":"48:/DuFU2jgO2SOBfbViwSVLILmRlJq0qObDrlUVCdZX4rLp14xg0h4bTsYhm/YLbL6:/CFzWfT6LILmRBrlFdZEp1vs3AQ","tlshash":"b7a18d49bffc100ea16bf1b784fb8904e6bd1237b10246a93e2e0a454f5819c575eab9","size":5004,"data":"","first_seen":"2025-08-01T10:29:49.53648Z","last_seen":"2025-08-01T10:29:49.53648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/js/lazyload.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8d842e69b44125a1e690f6f85b4dbb6","sha1":"f298231727c3da366bdc98b146075dd2d8bf9812","sha256":"4f55a2a3b0e1c060b376be1026a86380c4b4ed9bd000ffb867ac49f84977edc9","sha512":"3a18bd763f56de7e8b2b3c4e9d903be5d54f6bc5308cefd9f0697db592bfab390e0c2f34bb7b7c15361a8da30d2a183b8f591cecf4291163a952230842c8dee3","ssdeep":"96:3DU0gNYNpGxM7B2PswfNVRL2evyKSCjoFxVb1Gbe7BP+OpqC5URolicTejU+5UZ6:zpNiM7B1wV20jSCcFXbcbe7B7qC5U2ij","tlshash":"6ec1ef483deba15b91a3b0f89b5f5145b238810b101dee543e9c87e6af6093c26f1fd8","size":5673,"data":"","first_seen":"2023-03-26T04:57:03Z","last_seen":"2026-07-22T03:29:11.046014Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-06T06:25:09.03744Z","times_seen":293788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/index.html","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e42dbe88cdafcbad6868db0d498e8878","sha1":"6197560f2fd9399d56f87e6435e354e203df49ea","sha256":"28f54a15b16b8b672764f518dcdac4348feccc10b3c07df490df678793849e66","sha512":"f10dc813950b8f0d27df54e8e384d275598ab72f6f72a5905ec88c0593ab7bd31893d9d2e3dc15a91372723b47534847bc85f4b273eefe924536b4363bc31323","ssdeep":"","tlshash":"02c02b8c220a0c7042f72700cb3fbb04b002321c9cd06a314c19b3045d30e27d784864","size":153,"data":"","first_seen":"2025-08-01T10:29:49.59351Z","last_seen":"2025-08-01T10:29:49.59351Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/js/bootstrap.min.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-06T05:25:46.742466Z","times_seen":28314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/js/all.min.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6db763bc4e4a292c7520eb0a5bad0f5c","sha1":"b7a9d47d96ccb713e347013e09e52a35c0bb8c0a","sha256":"b8d6285de7d646abfe3ec205fce7e5366c2d28ce254ad9fdcabcf681597aca6a","sha512":"61276abc9a19afcde18fbe8021574e72f2d660c5b3cbab09c88322736690cf9921d9b3d377d77363736d75e100ccfa7f3e1819aabe1a24e6c1df29bfbec22d32","ssdeep":"6144:2dom9D5cEYjS2jDVG4xTcbqV2Dnio/NULo9tRtKeHVs3O3seX/YJF2S8eK8wDKSg:mD5cEdbqwtRwr3O3l0n","tlshash":"1845d578d7a4a3bc9d8687b5c62110747a8f90be71a09328937dc6f0b2575dcc2dacc9","size":1182680,"data":"","first_seen":"2023-03-07T13:17:50Z","last_seen":"2026-08-05T11:24:56.089404Z","times_seen":2925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i.imgur.com/C98XdMZ.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /C98XdMZ.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:54:34 GMT\r\netag: \"0640d3cc2a94f30698a72f65ac21df49\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: M8ffG1G46a-5VBZ3Bh1N7CNbwd4Qpu9jeY_ieO9sYBxN_P37NL6bpQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1633781\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kcgs7200156-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 54, 0\r\nx-timer: S1754044158.297675,VS0,VE99\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 145722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":145722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1184 x 620, 8-bit/color RGB, non-interlaced","md5":"0640d3cc2a94f30698a72f65ac21df49","sha1":"0795da2f74ae13221665df4a0cb54295dc97707c","sha256":"04181d0edb57bfead1134ef4778f3f6eb6af8b51746e53b46abcd1c269056b6e","sha512":"d8015a70437ccfa35fde17396fa81a09ca800255dfd9f2ca89d66294783aad4e55c3d81d1574b9b58eb1f9550dace896e0df69d9287a7baf71d9b9b20efaa9f4","ssdeep":"3072:DJfKT3/kV+qOEWiUgLAiEuIemmRtmXi6y5vaOwFgNdfR:DJEsV+qOERlUruIzuDiOwF2f","tlshash":"f6e31231bc9bfd8fd00d20b2133259a19289a0e5fc14295fc67777a29c60f9a5c48fa7","first_seen":"2025-08-01T10:29:49.513759Z","last_seen":"2025-08-01T10:29:49.513759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":184,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/Tp2HvzJ.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /Tp2HvzJ.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:57:07 GMT\r\netag: \"165b5c6e9695416ff4712f811e599aed\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: jx6h8izXGOHm-LkLyuh8fux8c7DybFJmGB7eK-zGh0JvsNA9NFKbyg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 157463\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kiad7000082-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 8, 0\r\nx-timer: S1754044158.273006,VS0,VE99\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 55328\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":55328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 626 x 626, 8-bit/color RGB, non-interlaced","md5":"165b5c6e9695416ff4712f811e599aed","sha1":"199965341352590c6b7e4526a6733faaecd4f904","sha256":"2ba0bed6868b872cfdc219e9a068eaecd4f43b5ccbafbc56e94bb810fe253b94","sha512":"457eabc54c2f341f24f7cfbd66fe38c6d86030e63276c77da70d1cc22b5983dadf68aed83ee6917b7a4c555697afb6ad8ccc196f4fa058eb97ae13d2a7427cbb","ssdeep":"1536:dKvADR27QTT9YdIHbLRGTXnXkBMZXcJ1t3OUtiMg:dKvGkkTT9Yda0rUBUXcJveMg","tlshash":"4843f17d2d34c22bae6d35537fb0e34211b7e48aa2ce07e6e24905a21774d64bd027c2","first_seen":"2025-08-01T10:29:49.515587Z","last_seen":"2025-08-01T10:29:49.515587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":54,"dns":10,"connect":35,"send":0,"wait":165,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/a1ULXbs.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /a1ULXbs.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 14:47:30 GMT\r\netag: \"fd205764d96a8c326829d5d9afd1bde4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: xAHN4Ors3Xpowc15pKM6J4OprH8bArpzFZivwi7dhTPTCZ3c-eMoLg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 797915\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100165-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 30, 0\r\nx-timer: S1754044158.273531,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 48277\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 316 x 316, 8-bit/color RGBA, non-interlaced","md5":"fd205764d96a8c326829d5d9afd1bde4","sha1":"0b16d800f3906e2cc8ce45b756f841493e8a7d13","sha256":"e1f0af65986f3a6e647c7c363967e749d0470f15f35a06ea439de3b59449150f","sha512":"520b09424f4285fd9903a9b97b671e11acd86c06f7ce09857d5fd0af3e50c68a28b4435e433174ffcf087fe8c5ea1eb2df091caef1d31b8cd2575d97edd4d9f6","ssdeep":"768:jEpy57mBQQkzBDDwWj+/N06L1dVvkP+h2kEQZO1ETHF1nIeg+q8XbZLD1lgT2:jEpAiBQfzeJN06FsPCvHFqeXxD1l/","tlshash":"7923f2a15e95dc59e7f0299b60d17b0d80900eea7715293c7a21b8626f13fe4ad0ce36","first_seen":"2025-08-01T10:29:49.517108Z","last_seen":"2025-08-01T10:29:49.517108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":124,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/js/bootstrap.min.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/js/bootstrap.min.js HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:07 GMT\r\netag: \"e2d8-5ec42352acfeb-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nvia: 2.0 alproxy\r\ncontent-length: 14794\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":58072,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-06T05:25:46.742466Z","times_seen":28314,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-01T10:29:17.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:17 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:01 GMT\r\netag: \"13d2-5ec4234d1b3a7-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/html\r\nvia: 2.0 alproxy\r\ncontent-length: 1751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5074,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (603)","md5":"33ebd3d781535f96d0320361dfd54e37","sha1":"a4c1918928106215badb93f2307346fdcc7119de","sha256":"d380fff4d89df3f2a239e6e7ca8ff8d2de82445213541e8fd60a5802b10a12fc","sha512":"8d023b473b7725668e3b8b55590224a7c23b27ad568978a434ced0c6d75a13e8857f8b13318eeaebfea9b3440edd9e75f8e9bd05e7dca20a1f0add728827d8ad","ssdeep":"96:hLRoioU/UvyGmL/wHGkJuu2+fT+ygyY7kXNo8jy/eyAnNyUs5sK7gRSW4d9wPeaC:Fym/lMPNVd4GTNTIBgRSJiYFjohq","tlshash":"a5a19713520e2206f6074473b3a29bd8477e14a6e91a47f4b42a3534facc300a67b7fd","first_seen":"2025-08-01T10:29:49.519138Z","last_seen":"2025-08-01T10:29:49.519138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":110,"dns":35,"connect":28,"send":0,"wait":57,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/ignitionLogo.svg","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/ignitionLogo.svg HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:06 GMT\r\netag: \"571-5ec423519e006-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nvia: 2.0 alproxy\r\ncontent-length: 774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1393,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aa57900839f04757d105ff25440c563","sha1":"35fb8ae9d1d9eae8270f83d13b75507523cb0e0a","sha256":"8aa505bc25eee3a47521b3f6e72cbd373cba70ad918d3ca50e9c3d08fddb00cb","sha512":"2d295995a5049a4da6aabec8b8b5bcafb03ac43541e0221da686c67b3d349c0d64ecb76e61b53c3b74c62fccdc050366b7418081df7afa5e62e7825378109300","ssdeep":"","tlshash":"062189b4dbf136e7e984c51d90707458bc7540bbda57308cc353273748116f009619b5","first_seen":"2025-08-01T10:29:49.520604Z","last_seen":"2026-04-26T18:04:45.452919Z","times_seen":5,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/ilk2tWK.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /ilk2tWK.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Feb 2025 17:05:23 GMT\r\netag: \"ffd5dd02a9880f749e855c3c35bb2d38\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: RKVRWXKAsEaMSQqtBJct107dNRf9dH6X0zGXZEteFGAXjCQtv4eYvw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 855779\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kiad7000115-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 29, 0\r\nx-timer: S1754044158.298276,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 2082\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"ffd5dd02a9880f749e855c3c35bb2d38","sha1":"a20e1b582b1a71ea21e8f3c2c97e91569c71258a","sha256":"90126997d9f7b02afafb639e36e5270823f095e4664a3d0a3706a3fca558194a","sha512":"a8ace823d16917f51c4b195282be1be1163ea25aba848c404bcbe6d344672a2059c6e3a64994d20b199e81bb9d744bf6878841a1f52bb30f482026be5efff46e","ssdeep":"","tlshash":"f641f8069159a34ecead6e32ae1a8ffa67f4d834c01da55234ec1636064ee00f592399","first_seen":"2025-08-01T10:29:49.52215Z","last_seen":"2025-08-01T10:29:49.52215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":193,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/index.html","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/index.html HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Thu, 13 Feb 2025 17:06:38 GMT\r\netag: \"13e2f-62e0914cb4423-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/html\r\nvia: 2.0 alproxy\r\ncontent-length: 8473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81455,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (657)","md5":"ac3ae37c608c2ac58454d09e2445e393","sha1":"9fcc4afd80789efb4f08484f0e203db2e975021d","sha256":"e98941ca038ad990925b93d64d02ee646ddfeb555d580da4bd679aa74ea02ed5","sha512":"05867759475d4f4b3262b3a77a42576382d36efe8980ddd879cef35ee90d434bb470efdacb59eb12dcd66617d0158550eec14be4e4e7fd846ee76938c27d4efa","ssdeep":"384:FK9QAOQqoC+FBM4/JLyxOMQcF+NfARwU7TEr8hQYQcjEbVN8:ux7JGxO2kKwUEYQ9o","tlshash":"3683ae7294c76973d30778cee934b759b2e2d32fca17a94065f873b4abc6ca4b902411","first_seen":"2025-08-01T10:29:49.523206Z","last_seen":"2025-08-01T10:29:49.523206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/1LrbCGV.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /1LrbCGV.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:52:59 GMT\r\netag: \"339b5c2441f30b4383e0843642d92afe\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: pIRgxUbRMmAmjUW8VQ-HHq5CfxUav0nM9xRhZrwJkLxBTuBC64ePrg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 980005\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kiad7000085-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 40, 0\r\nx-timer: S1754044158.298064,VS0,VE103\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 198238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":198238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 330, 8-bit/color RGB, non-interlaced","md5":"339b5c2441f30b4383e0843642d92afe","sha1":"d4798e9a731caf632cf0d69ad65fa6054c969cb4","sha256":"0266556aa6d03a8a04cde2464dad0d8954dfd03b2240e52a5d92aea5435eda78","sha512":"0095b6b348c6992e5ddc77bbccbea7630a5acb838b6990068d5ecb559aa6b24466dad54f6775c7027ed1b62eb7b3ace023ac64da613c88045926629ebe3c496b","ssdeep":"6144:iA41lf4khwwzvnpF3AIfdjERwpBTZanLrhSL:VUf4kHvjwv+ZE8L","tlshash":"3f14138b610797d64bab73372a0da2d91727afdf409894a8011c3444807f9ef493bfa7","first_seen":"2025-08-01T10:29:49.524893Z","last_seen":"2025-08-01T10:29:49.524893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":195,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/SWrWa9H.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /SWrWa9H.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:53:12 GMT\r\netag: \"1c1d862749af5ce1699375f98ee435cd\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: ayjW2Fh9SMazkJWcRWMP7P9xfbe7DAtXRm3XIXpejITkHwYtqOR47A==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 863454\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100127-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 31, 0\r\nx-timer: S1754044158.298606,VS0,VE104\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 354397\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"1c1d862749af5ce1699375f98ee435cd","sha1":"16512db8721bf0d743ab6c2579ada30efc3e24ca","sha256":"55d8b96fe749a932fa557b4690169b0ff3eadf66a795ba9fe5323ea072a91fa9","sha512":"4db2721895584e9fbc87abf1961cecc949830e1b6847776dcdad371df8a06c6930aa8ce9c5b9821e6f8b1e4064844a23073a0336fbbb997eda9a8565a1b1e0ac","ssdeep":"6144:CysPmsBWNFRbbLRJlb/t2jLVrZCoNhh/8UU69vNkdl3ckC8W1M:CyshaRjR//t2PVrZCMru69v0lsVj2","tlshash":"d97423bbd1fb333e087395e140f3066c96fb82ba506127697a465f15ee1612b087463e","first_seen":"2025-08-01T10:29:49.530432Z","last_seen":"2025-08-01T10:29:49.530432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":195,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/bigboi.app/LP0/img/preload.jpg","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /bigboi.app/LP0/img/preload.jpg HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:16 GMT\r\netag: \"899c-5ec4235b5f88d\"\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\nvia: 2.0 alproxy\r\ncontent-length: 35228\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 512x512, components 3","md5":"8fc38af3d0f8b5101c6f6b5e70a62ed1","sha1":"6e9113a7a1247085a08211e97140a56e83ed4cc1","sha256":"d9d2a94021a615ea8367a4f117a630b911ffd2b8ced213c6e77d8b3614b3c2bc","sha512":"8fba80139b6d17b70878fcfda41e0054d08af786d081affa4f8858034af6f0244509b71627f2aac649ebee6c0162bade075d0d393bfe108c7b4732b8ee4de3a3","ssdeep":"768:56bd1v2SYCc+QF57v63JyHA7jubW5+t7EcdEuupihkj+Py8r8a8m83:56Rh20c+Qv7dHAH95IiuupikjAr8a8mS","tlshash":"85f2ae5db901cc32c5d2123d2f4eef0f81a296fa68749952376eee93e3d462b81104e7","first_seen":"2025-08-01T10:29:49.532172Z","last_seen":"2025-08-01T10:29:49.532172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/css/style.css","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/css/style.css HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:07 GMT\r\netag: \"1325-5ec42352307c0-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nvia: 2.0 alproxy\r\ncontent-length: 1582\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4901,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (604)","md5":"64858ef7af43f5e3520ddac111579c8f","sha1":"b806a1e2368711cc90712f43fc561c7fc1e8fbfb","sha256":"febfae6b5a753a058b709744f60af3fd1c959d0a55994cb117d018d43bbda31e","sha512":"0d45b726ab812126f89630320843796a3f7bda825b47589bd0738835d54eb28161e6962070c56789466980f4367a1f3cdb7155c47e05bc8e5249b6771cc3ed81","ssdeep":"48:UFZd5658PyQOzdYWnskea7FjNL5JdpXwwUu9wEB+ws5FfFkD+XZ7jWKs9O1r74FX:U3VPyQOXp7tOynSoAU9u4FsnzmVOo","tlshash":"fda1632f6b082905b01bd178ee5a6bda932f0013bf5f5d5abda1356cc7854c444f3a8e","first_seen":"2025-08-01T10:29:49.533643Z","last_seen":"2025-08-01T10:29:49.533643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/3B3Da7Y.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /3B3Da7Y.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:57:25 GMT\r\netag: \"4a62c0731c689edb4205808b8e18852c\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: cAk51qeZA8slWcqoy3rqRMjQH-Zaj7_jJ6dRj_4GVA1ySRMKWyXSoA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 250469\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100116-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 12, 0\r\nx-timer: S1754044158.272986,VS0,VE99\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 139897\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139897,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 709 x 709, 8-bit/color RGB, non-interlaced","md5":"4a62c0731c689edb4205808b8e18852c","sha1":"2ffdc375c748195484173cf37c8d32539165dd22","sha256":"c348d61bb79f2785c00561f430116ef4a415cdf5265ad2dff12b270f957f3255","sha512":"3c8574bbd4345df9e21551459c658ff9ed9fe70fcca8ee406855137906f6359b5394fbc1e1519ca7ec42a0103b6a15dfdaab5ba4684794861304232e0edeae9d","ssdeep":"3072:83Nv9GwCJNBHoUAlKx1nHC9zN8IdMQVoJXOoM+88EUeM/VHAY:83MV1nHC9zNzdMQVYMMtVHb","tlshash":"01d31243d54b469c891dc23fd7ac69e03e3bc66450ce412ea194a9d31a4bf4d31aefb1","first_seen":"2025-08-01T10:29:49.535033Z","last_seen":"2025-08-01T10:29:49.535033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":183,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/js/custom.min.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/js/custom.min.js HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:07 GMT\r\netag: \"138c-5ec42352acfeb-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nvia: 2.0 alproxy\r\ncontent-length: 1173\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5004,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7f6c6160c1f3e9a463614c054d86f568","sha1":"529a97952c5529ff5ee00d6b93b326267b21eb4c","sha256":"c0e1cf23abeb99735a3ad6e855d2fd644a8dc96ea23819a9cdb5838f844229e8","sha512":"c98f6c7ec05d32f9726f0b83c42eb68037c5b3ad71c0a590b812e5315dc9ac505caa3023b286b654c0da81bd1a1a3d2404d738b658539e185f269951c7e49661","ssdeep":"48:/DuFU2jgO2SOBfbViwSVLILmRlJq0qObDrlUVCdZX4rLp14xg0h4bTsYhm/YLbL6:/CFzWfT6LILmRBrlFdZEp1vs3AQ","tlshash":"b7a18d49bffc100ea16bf1b784fb8904e6bd1237b10246a93e2e0a454f5819c575eab9","first_seen":"2025-08-01T10:29:49.53648Z","last_seen":"2025-08-01T10:29:49.53648Z","times_seen":1,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/index.html","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-01T10:29:17.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/index.html HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:17 GMT\r\nserver: Apache\r\nlast-modified: Thu, 13 Feb 2025 17:06:38 GMT\r\netag: \"13e2f-62e0914cb4423-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/html\r\nvia: 2.0 alproxy\r\ncontent-length: 8473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":81455,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (657)","md5":"ac3ae37c608c2ac58454d09e2445e393","sha1":"9fcc4afd80789efb4f08484f0e203db2e975021d","sha256":"e98941ca038ad990925b93d64d02ee646ddfeb555d580da4bd679aa74ea02ed5","sha512":"05867759475d4f4b3262b3a77a42576382d36efe8980ddd879cef35ee90d434bb470efdacb59eb12dcd66617d0158550eec14be4e4e7fd846ee76938c27d4efa","ssdeep":"384:FK9QAOQqoC+FBM4/JLyxOMQcF+NfARwU7TEr8hQYQcjEbVN8:ux7JGxO2kKwUEYQ9o","tlshash":"3683ae7294c76973d30778cee934b759b2e2d32fca17a94065f873b4abc6ca4b902411","first_seen":"2025-08-01T10:29:49.523206Z","last_seen":"2025-08-01T10:29:49.523206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:19.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duckfed.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 15:48:02 GMT\r\nexpires: Fri, 31 Jul 2026 15:48:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 67277\r\nlast-modified: Wed, 28 May 2025 18:06:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-08-06T06:26:21.109584Z","times_seen":52625,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":112,"dns":3,"connect":15,"send":0,"wait":15,"receive":36,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/FAwfLxN.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /FAwfLxN.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 Jul 2022 15:08:40 GMT\r\netag: \"c807553aae77de3f4bee35e773646e06\"\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 9nlDcNVonuKmre16pbjQ2W_qGk-GPagWCmFLb_UegeqU1eSzWS7LpQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 619751\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100138-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 13, 0\r\nx-timer: S1754044158.298004,VS0,VE97\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 41103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":41103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"c807553aae77de3f4bee35e773646e06","sha1":"43b5258a2f1e4b1f439eb1f7f5e7d710b01a84b9","sha256":"646cebe0b555c339dba742f3881abf0df672291af303b8e2d603002859ee299c","sha512":"bb175d44c7069c0b7356bbaf730c1bd71cd762dc5dd47755ec609c6d0c9fbbb77e2ae5ae4ffe50446cd2ea97f1d3109cf01667a7e5feaf74963810b58fe712a5","ssdeep":"768:6BFhgyfGw/sExr2hkrKwMLU/U7l5vZjkL7g8jFT8+cScXS/P25Zvr:yh80xikrBApUpcbC/PEr","tlshash":"1803f28a79821609fd8269333797fca1c385ce0394d97d5f72eacdc7c48aa99e750131","first_seen":"2025-08-01T10:29:49.538952Z","last_seen":"2025-08-01T10:29:49.538952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":192,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/js/lazyload.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/js/lazyload.js HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:07 GMT\r\netag: \"1629-5ec42352be15a-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nvia: 2.0 alproxy\r\ncontent-length: 1525\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5673,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a8d842e69b44125a1e690f6f85b4dbb6","sha1":"f298231727c3da366bdc98b146075dd2d8bf9812","sha256":"4f55a2a3b0e1c060b376be1026a86380c4b4ed9bd000ffb867ac49f84977edc9","sha512":"3a18bd763f56de7e8b2b3c4e9d903be5d54f6bc5308cefd9f0697db592bfab390e0c2f34bb7b7c15361a8da30d2a183b8f591cecf4291163a952230842c8dee3","ssdeep":"96:3DU0gNYNpGxM7B2PswfNVRL2evyKSCjoFxVb1Gbe7BP+OpqC5URolicTejU+5UZ6:zpNiM7B1wV20jSCcFXbcbe7B7qC5U2ij","tlshash":"6ec1ef483deba15b91a3b0f89b5f5145b238810b101dee543e9c87e6af6093c26f1fd8","first_seen":"2023-03-26T04:57:03Z","last_seen":"2026-07-22T03:29:11.046014Z","times_seen":56,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/dM6hSVY.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /dM6hSVY.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:56:51 GMT\r\netag: \"e111df6fe70de0ee44d2c693a4f6f7ea\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: i8aK2aEMRjNRbFe2njmS5zqbT3e9ca0EXnUln-Da651Wa2c5z2Up3A==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 789686\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100162-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 21, 0\r\nx-timer: S1754044158.297568,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 76898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76898,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"e111df6fe70de0ee44d2c693a4f6f7ea","sha1":"c81595b1542d0e33471a0636851140eeaf418493","sha256":"9b3151ad909c6da7ba8326ebea4125fe002c250aca5aa0d77077917ea26287ae","sha512":"376a8317ceb4a52eaca4c33b4d33266d4ee85a88d88988576dfdf93f65926e9852f230afa5447b2857adc24851628d40eeca4a86ee2fff7e36257b38ee1719bf","ssdeep":"1536:3g+WlZ3IhBQNTCY2NiH1eF0c7Azc+g2EWXZMmUVRj1gT9i7p:Rho+Y2og0aAQ+gMTUVRjWTE","tlshash":"8973023580df8bebc09f362935a38f238537b261db6057630d98e16057b76aa3d009dd","first_seen":"2025-08-01T10:29:49.541514Z","last_seen":"2025-08-01T10:29:49.541514Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":181,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:19.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duckfed.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 15:48:02 GMT\r\nexpires: Fri, 31 Jul 2026 15:48:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 67277\r\nlast-modified: Wed, 28 May 2025 18:06:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-08-06T06:26:21.109584Z","times_seen":52625,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":204,"dns":2,"connect":28,"send":0,"wait":17,"receive":14,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/vahTI9r.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /vahTI9r.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:55:07 GMT\r\netag: \"70b8eeb5a36dadc18bfebcfd13a87768\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: EBAWjxA7P6GLx_sRlLOgRCBio8QUVFJIRQClvgtXaoJIDC4XAcbSig==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 157463\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kcgs7200112-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 12, 0\r\nx-timer: S1754044158.297622,VS0,VE99\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 9460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced","md5":"70b8eeb5a36dadc18bfebcfd13a87768","sha1":"8917799abe7584b16a89c97b59252af21daf9375","sha256":"d762c32e358f5f0e03c4270c1da76dd94b376794854947cb3ddb485be01c0322","sha512":"ca4b78cd84b1f2f90997214d4e98ac2bf4b5af181319f73b3964ceef5ee59633d64a0b681329d7e99fc6063a2f65ecb8429060f63e1c494413b5eadd5409346a","ssdeep":"192:kOXgYEdCavCISa9l7H6jGTcg5mnKVbSCgPGyKuyfY4AL8:s/pSYYKcAmnKBlgPGyKuyQ4AL8","tlshash":"f612296bcc764be73243a2f1445ac1aacd848b6af320f91fc2d5467dd22663876e2705","first_seen":"2025-08-01T10:29:49.543057Z","last_seen":"2025-08-01T10:29:49.543057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":182,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/OWTimz2.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /OWTimz2.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Fri, 30 Jul 2021 20:33:39 GMT\r\netag: \"3dbeb96c5dbcdd3da629757eb6b4a917\"\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: CYIOPyW5XkreXfsBTEqGLz_pfhJpNh0-mzg3r95QKQWObuDCBoqOTQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1317542\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kiad7000069-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 45, 0\r\nx-timer: S1754044158.274308,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 32657\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"3dbeb96c5dbcdd3da629757eb6b4a917","sha1":"6fb76dbac4a1a185423aa687e31effa9bd193777","sha256":"790752767c29820de2bfc7309216ddd1f13e3c7be1cd5d680d27b9d6966ac465","sha512":"e99f00ba202a90fa178328f69dbcb41b52de75d4a96a7f85e7cd09eb3bfc5d382c185cede85b58dfbf887eaf989d2112872a409f25278b9156862a0f4be0d5e3","ssdeep":"768:6G1yUeNEjINT5ADoMOmOTOOPKCIw2/LqN6QRLXZpdXhAtaKIn1:OmsAlOTOOPTLlN6QtXZvXhoxm","tlshash":"ece2f1f35528cf11dc951cfa87a651c1c35dce3f6b3827a4b0413c7a7e829899a4ae47","first_seen":"2025-08-01T10:29:49.544634Z","last_seen":"2025-08-01T10:29:49.544634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":161,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/DeXEucZ.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /DeXEucZ.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Aug 2021 23:27:35 GMT\r\netag: \"e98cae4c2d0f7b16b46a1cb6c6d96943\"\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 1bMdFxLboIb9KKsdMJax_A-PHoV8_k8kdwLfYKfXIYlK1bPiNWkaFw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 5293\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100144-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 4, 0\r\nx-timer: S1754044158.274325,VS0,VE99\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 67969\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":67969,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1600x900, components 3","md5":"e98cae4c2d0f7b16b46a1cb6c6d96943","sha1":"2644a24007a2e8e1ae1b43c8de1ce547ef229d9d","sha256":"6941f899cdcd7bf2eab6f2e44a786e409c939a57405ffa5b93470ca49eec8dfb","sha512":"be5e7b27fb35bcae2ba9704e11a004dbd6f35432556e29703f89a347a51dbfce100c8097dc36941347c69e4a93d9292b266c8a67821d73bc0c376640eb264c73","ssdeep":"1536:/UGCy0gHtFyJzCoHSyNfDXQQrjO+/Wx0pD:/UGCy0gHtMNNfDQ6I6D","tlshash":"306302fdd71c3447c97608fa92138112572b0bbdcf49693f53b83a8098657dd67aa188","first_seen":"2025-08-01T10:29:49.549136Z","last_seen":"2025-08-01T10:29:49.549136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":190,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:09 GMT\r\netag: \"14e4a-5ec42354583c9-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nvia: 2.0 alproxy\r\ncontent-length: 29212\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-06T06:25:09.03744Z","times_seen":293788,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/NA2V3ug.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /NA2V3ug.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 03 Nov 2022 22:01:00 GMT\r\netag: \"649d0f0898ff29b3e5e79faec7b3791d\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: ff2BqrBv2ylk1bfCJXdY84BB-qddF4jUTzQdmrX9wN3JPa96sCTukw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 330587\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kiad7000038-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 12, 0\r\nx-timer: S1754044158.297873,VS0,VE101\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 198699\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":198699,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 2000x2000, components 3","md5":"649d0f0898ff29b3e5e79faec7b3791d","sha1":"d9d2a0a17431c8e3e469a2b2f690e514b7af05aa","sha256":"a62cc01def671893b8213a21550aab086689c2dcd506bef5f270cf161bcb883f","sha512":"8e7fd3909089dd5369d14d8b6b70edf29cfc600791fea1b7ecafc2f9d5bd4e7090f153c328a936ed8491270e34ead5ff55bf106a0de2cfeed9e2bb566ebe3ae2","ssdeep":"6144:Qjk7TpAbmZ3Py++Ps/zjGi5tqf/APXQrV:QSqmZK+b/zd5c3+XQZ","tlshash":"661412f8c37566ceca8458b88d472e0aa53b7b78dce2568c1643bd1eed103168f7b484","first_seen":"2025-08-01T10:29:49.553727Z","last_seen":"2025-08-01T10:29:49.553727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":195,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/backblue.gif","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/","date":"2025-08-01T10:29:17.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /backblue.gif HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/css/bootstrap.css","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/css/bootstrap.css HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:06 GMT\r\netag: \"2ecbc-5ec423521a831-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nvia: 2.0 alproxy\r\ncontent-length: 22573\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":191676,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (570)","md5":"738aa3a64d387ee5eae039c520068b2c","sha1":"47182a789966a005b857ba5515184a580a4842c9","sha256":"9c532036716c9fcafa464ea00b68f005009bd507f792763a6e4c15688b988d4f","sha512":"21d78ba12fbcd0b8e586394ba78444d005a85cc5d7b47141f30a754d503b291b9ce2516f0d0221841fef0c39137690286a66d270e930d8b0e3bcbb866eec1cce","ssdeep":"1536:2ywlspJfXkgUpuoRnm4ADXeASzja+QTzNlX81PwqLq9S/zDL4iDF4jg:20kgUAyVwqsS/zDL4iDF40","tlshash":"08147459fdf11504706b826c64d6f7f57b6d8087c61edebabae22224cf493c14cb2988","first_seen":"2025-08-01T10:29:49.556813Z","last_seen":"2025-08-01T10:29:49.556813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/yHRDxHZ.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /yHRDxHZ.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Dec 2021 19:04:41 GMT\r\netag: \"7edd849f576d25be0dc3c1b9f84549b3\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: VuDq4Xk-lF1iBnIPofsat9kCRevCRJhpMpugpxZcOfEha46z8JeleA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 250469\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100048-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 9, 0\r\nx-timer: S1754044158.274350,VS0,VE103\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 866624\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":866624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 593 x 590, 8-bit/color RGBA, non-interlaced","md5":"7edd849f576d25be0dc3c1b9f84549b3","sha1":"e0c3be31e9123330f644bdbb761d2335016be0a0","sha256":"8e2ceffbedfec6962cf3de424cfdad62ea0f2e5b354fb722d5f5587c3f4af0dd","sha512":"f6011d3a7d75c0adf378418357d07e59b877162c09518476e5b6353415d3c787fd5f762e656637fa6965410b03cb8d58d9ef0bbc95e96d50a1a53ebece0afdd7","ssdeep":"24576:bsc0Z+MjfT8772Or5O1rSawZTWjmwWLsYnpE+:70g8fQP2f1rSVTWjFgr","tlshash":"34053326330cf139a45f5af45ddb75ba34ec1629b9fdb8233ca297929a400ecc647538","first_seen":"2025-08-01T10:29:49.558381Z","last_seen":"2025-08-01T10:29:49.558381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":191,"receive":551,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/ignitionLogo.svg","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:19.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/ignitionLogo.svg HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nCookie: _ga_NZD0ZCXE6Y=GS2.1.s1754044159$o1$g0$t1754044159$j60$l0$h0; _ga=GA1.1.1728693711.1754044159\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:19 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:06 GMT\r\netag: \"571-5ec423519e006-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nvia: 2.0 alproxy\r\ncontent-length: 774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1393,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aa57900839f04757d105ff25440c563","sha1":"35fb8ae9d1d9eae8270f83d13b75507523cb0e0a","sha256":"8aa505bc25eee3a47521b3f6e72cbd373cba70ad918d3ca50e9c3d08fddb00cb","sha512":"2d295995a5049a4da6aabec8b8b5bcafb03ac43541e0221da686c67b3d349c0d64ecb76e61b53c3b74c62fccdc050366b7418081df7afa5e62e7825378109300","ssdeep":"","tlshash":"062189b4dbf136e7e984c51d90707458bc7540bbda57308cc353273748116f009619b5","first_seen":"2025-08-01T10:29:49.520604Z","last_seen":"2026-04-26T18:04:45.452919Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/XqZI8YR.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /XqZI8YR.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 13 Nov 2021 16:50:43 GMT\r\netag: \"8d39b1fd071cab3a6391892f8b60d3e4\"\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: _ZLHzFkmETyCYeKPbILWWCjbOnL5OX8ygsftZ0SbIy5d9cnP-sQcug==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 555069\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kcgs7200130-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 17, 0\r\nx-timer: S1754044158.273587,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 23162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23162,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 399x399, components 3","md5":"8d39b1fd071cab3a6391892f8b60d3e4","sha1":"104535bcbeea2f7d00db137c24136c3d8f0a0753","sha256":"30b213ad97a7339c0235c8782b3580562c409ec4e3041c23c1a8464fc61e2279","sha512":"de67d2bf2ec912ca6b3f1f021feb280d73f83d70c12ceb63b993edf9f135dc5096a9387a89ad6d5a88992875215cadd0f963a829674a88ae4fd89f41622ec9e7","ssdeep":"384:WZyp5kl+/HvfPunFUz6qjrfuipc9WYWU/MrjLjI+ptfoypXp5LNZfkI/44NR99Di:iyLk6vf2yVf5c4jU/Mr3jV1BZ8q44Nx2","tlshash":"41a2f113b2226d09dd9c083963e5173cdf17bb94ecec165e386807d0175a2f60e5ce6a","first_seen":"2025-08-01T10:29:49.560075Z","last_seen":"2025-08-01T10:29:49.560075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":157,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/js/all.min.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/js/all.min.js HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:07 GMT\r\netag: \"120bd8-5ec423529223c-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nvia: 2.0 alproxy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1182680,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65350)","md5":"c36fd6a6b491e20e8a959fa34b1d65f3","sha1":"37d853900e68a9a742401750ef58592854e4d6b5","sha256":"5260800c91f325af2855db848a52c3e5e2871fdbad29b654dbe7ca57bd156baf","sha512":"af9a64c861458da9ab2d9731afcce9029cc9b6cd430d81ccd8df1df579c959bfbe089076dd27e41fc463f5e419803777fc16204efcde4624fcc3b2d01aeb6d56","ssdeep":"6144:2dom9D5cEYjS2jDVG4xTcbqV2Dnio/NULo9tRtKeHVs3O3seX/YJF2S8ea:mD5cEdbqwtRwr3O3l0a","tlshash":"db25c578d7a4a3bc9d8687b9c62110747a8f90be71e09328927dc6f0b2575dcc2d9cc9","first_seen":"2025-07-28T11:04:51.031388Z","last_seen":"2026-08-05T11:24:56.03434Z","times_seen":2807,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/webfonts/fa-solid-900.woff2","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:19.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/css/all.min.css\r\nCookie: _ga_NZD0ZCXE6Y=GS2.1.s1754044159$o1$g0$t1754044159$j60$l0$h0; _ga=GA1.1.1728693711.1754044159\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:19 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:08 GMT\r\netag: \"127d0-5ec42354053ac\"\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\nvia: 2.0 alproxy\r\ncontent-length: 75728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":75728,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75728, version 330.32636","md5":"44d537ab79f921fde5a28b2c1636f397","sha1":"b2879f9e1d0985a96842bf7f55a2b2cc4c636d04","sha256":"3d1080625d3030e88357b3ac9aa377dcec23f1b529c4ad03f7a9a435ccae04be","sha512":"08836d89ba7c7b7645c9de36e2e856cdc31fbb1c3a4a83045848d772720b98d352fb11182471161ef07d01739953a6320355ffecf25a06881bb1111ba02a73cb","ssdeep":"1536:sFUt//lLi8pq0MWeLhkzipMZ4LbW+nNjzw5ytuNCNbqg6g4xNRrFw:99Zpq0MWGhqa/HBnlz8ytuNYWg6ZRrFw","tlshash":"32730235ca0b7289b178227b3cb16645b72981c25e5bc4529f6fd3acdb0518c35f07ae","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-08-06T03:26:22.196881Z","times_seen":10631,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NZD0ZCXE6Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-NZD0ZCXE6Y HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nexpires: Fri, 01 Aug 2025 10:29:18 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 117657\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331719,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"fa92756b525c47fd01eca08966d4f4b7","sha1":"724785d08153e9c512e2ecce87f3712ffdf6026a","sha256":"ac53cd82b3802703044f4667652426326a6809e2e661f96a7452af31d414dda2","sha512":"95e4045b20e38d6581daf7dbd7ebf557a93aa0f0c53b7d8dac4a7e4da13377d606bd595427fc5e6b01fb4e708c4c0407a13f430704d4c83055514e4964ce9739","ssdeep":"3072:mEtSeWKA8xwym0Ro1IYfz0ce38JGXbrunAIH1EMHsNklKZtcRWaWU5Fjt2YwrybA:ggvm0ZgHnCklo9aWU5Fh2nrmwGS","tlshash":"0d6419cd73d6b46683a2b478503f014ba17b7a92f84cc894f186d8e42e74aa94177f7c","first_seen":"2025-08-01T10:29:49.56323Z","last_seen":"2025-08-01T10:29:49.56323Z","times_seen":1,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":223,"dns":1,"connect":21,"send":0,"wait":43,"receive":54,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/gQqJsul.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /gQqJsul.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:53:23 GMT\r\netag: \"164dffb95ee22bdf10d71da23cbdfb63\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Db2XsiKMemRXJAoHedzuCQCVYebxA-9z_s_NAObthBTINNBbcLvlvw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 932824\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kcgs7200075-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 35, 0\r\nx-timer: S1754044158.298248,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 18775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":18775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"164dffb95ee22bdf10d71da23cbdfb63","sha1":"111ff46137d9d478fe75ab341e4394b507c9bd6b","sha256":"b5ed3581175c4c1c18ccfb867ce8bd1a4bb5d77d58a8b74fb8b19e45a118fbb5","sha512":"a1b67afe22fed180f2cf0369cad0637f571b8a349d9a1b2a33f76adaab192b7c2c1a552420d20544faebb0ce2746099db33be5e8aecab1773e6dea8e3ba016d5","ssdeep":"384:apUMSLFbSfbuHtTcWvivRjXKo95fl/D/sN5oiEI0b:SSpbSfbuNT4vr93/D/25BEhb","tlshash":"2782c060ec50252492cce01148949ffee359cc79f9583b6fae1934f516866ddcc6e8c7","first_seen":"2025-08-01T10:29:49.564657Z","last_seen":"2025-08-01T10:29:49.564657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":190,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/Jgtt8K4.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /Jgtt8K4.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:57:48 GMT\r\netag: \"6be96719c5f2694179bf74b2b6c77cf8\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: dCngZtz7bmUoL6YqUykiXuLtp84zECcax_2Hiw6_C7S2_ZrJrg-7yA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 980004\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kiad7000041-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 40, 0\r\nx-timer: S1754044158.273276,VS0,VE100\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 344833\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGB, non-interlaced","md5":"6be96719c5f2694179bf74b2b6c77cf8","sha1":"eb117a64abe7bab2f9ffdf84deee8ae0d57adf5d","sha256":"e2c75c51c8d85117d9fdec132ff4e4b6150369bce1401836c8247237a2583e1c","sha512":"22bd72fe3ee47bcf3fe9c0f5e7b76c333e8a8dd38681297bbf7afa26f21a6b36f89c94c73c51212d2565bb45f55d038f115b618bf3933297b2c4cb4fb8ecdfc8","ssdeep":"6144:9p3Pu8XRF33pcUsH8d/YHxKbJ+QasbBAeJAl6lJTYVhl7s42HMHnTb6umU+spUV:b/NhsH4/YHx1UBMIlalsXW/6w+sk","tlshash":"4c74120e6d33584dfb549332d6206ec3bfbb464f02e13b98437d1a75a9aa1f5b038994","first_seen":"2025-08-01T10:29:49.566242Z","last_seen":"2025-08-01T10:29:49.566242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":192,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/css/all.min.css","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/css/all.min.css HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:06 GMT\r\netag: \"de16-5ec42351f8553-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nvia: 2.0 alproxy\r\ncontent-length: 11887\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":56854,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56668)","md5":"817380209079dfaeef6e5d98c26298fe","sha1":"44f4f4224bf6b16461bb75fd7efa27a9a5af534b","sha256":"1c44cf200dc5d97060c7a0d87494bdfea5de32793be197e559364c7956b00f51","sha512":"f9e5a0ada17d0b18700d18fb829d71d1f559778e4c831993ec0b4690a566c96932064b9b4c4ee5bb8ecc43c796d0e060565cdee1133601f47620e5ec2576538e","ssdeep":"768:VEC31sPizPq4/vBUAUHJUkQdR/WMQyYJrX75CsmZQz0:VETPUC4/pMHGBdcfd7ssjI","tlshash":"b9430bb8e54c01c9a731c44fbf82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-05-22T12:23:51Z","last_seen":"2026-07-22T06:21:26.639233Z","times_seen":117,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 01 Aug 2025 10:29:18 GMT\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30070,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"6ba6d132cbf8659e5d64dd73473ba2be","sha1":"9689e2bdd8849c6020061c00da0bc8cb49d10d1f","sha256":"535622f8b81ff0b382f1b3e3a5ce669ab3cf23e6fdbd4720d266fe3d40b004e9","sha512":"057e3c656d9f91760f292dd1d606190831f1abfbfa168a4b26041a3a07c66cb3d9140d7392070a627b09ba26770e9dde51fa415b0b31de64cb8be5a7df668644","ssdeep":"192:fZdPZyZnZdSZZZwq4ZAbqGIwV4GZaZwpZOZdKZ3ZiZdXZIZwqJZAbqGIwV4jZfZB:L/DqY4XE8qY4wCuqY4TrfqY4fIIqY4F","tlshash":"55d21b90041b1810ab435de633de7e34ee0f92266144d07a6bfc8b8bdedad6563b431d","first_seen":"2025-05-30T07:27:06.594568Z","last_seen":"2025-09-16T15:36:28.283803Z","times_seen":366,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":211,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/bigboi.app/LP0/img/phone.png","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /bigboi.app/LP0/img/phone.png HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:16 GMT\r\netag: \"5084-5ec4235b0c871\"\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\nvia: 2.0 alproxy\r\ncontent-length: 20612\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 183, 8-bit/color RGBA, non-interlaced","md5":"720f1ae9420a59aa21bad7d4d12bdcb1","sha1":"b91c816991959d4786e5bbae31845d3149b94d57","sha256":"24a3a4acc2253259357d1e5ba7f0dcd388720245fd6737f325df7ab523068fbc","sha512":"b3e041623e4ebb3912af7d0a1c23b7311aa72fa3610fa606a5afbd3f1497bc5ed408dbcfa4704cbca1cecfc22a18f2956c7a4c97e0d6697a197d02089d0be98b","ssdeep":"192:jkiriCnDHGeqIGGBuFXHUskQZqwyGeJ8SfFDH:IieyTNXGX0UZqrGeqSfFDH","tlshash":"11926b81fefa3589054b96366de039853c7322c3cc828e8d779d9d5a6f00b894c8f683","first_seen":"2025-08-01T10:29:49.569432Z","last_seen":"2025-08-01T10:29:49.569432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/uSLn619.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /uSLn619.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:53:52 GMT\r\netag: \"f317b42195703014f38a51bf161fe531\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Zjq79XZE7_pMatAXZcfsK0eDvyz8BdZJQ0em3QQFYUlKev3V-YYJRA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2053887\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100053-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 71, 0\r\nx-timer: S1754044158.298436,VS0,VE109\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 95169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f317b42195703014f38a51bf161fe531","sha1":"c33a8c3b93bbf8338f9dd7fba07ef90c94fa31ad","sha256":"7210896d968ad948b316fecdaaad11fa77692e41755eaa943ed420cf972259c0","sha512":"d300713e5962fb8a75178ecda94b101aa8757d4e79515f36fa222f1e122b4b250d3062f821b3ca40d1041da05f90cdda3d6d43dae9b707492ebbbc6147115273","ssdeep":"1536:Sd6B0S0p2y3d0s0qwLCcMYs5rjQCE31LjgHXwHjS84cgat4cjIbdDAaUdMd2h:j00wc5kdEloHXwHtf8bdDAaUsW","tlshash":"e393127865a688085ae77855ab906cc176489df1ce4603bddfc2f81a3ce2f5cc604ddb","first_seen":"2025-08-01T10:29:49.572399Z","last_seen":"2025-08-01T10:29:49.572399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":186,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/yj7D9GP.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /yj7D9GP.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:55:23 GMT\r\netag: \"3b1c22626042aeac354ad7a2207167cc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: -WBy8x5xVyH5eCopWT-ASS4X_h3bVlIdhDHvgQnRErAfGYoS_nkDSw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2128595\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kiad7000125-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 69, 0\r\nx-timer: S1754044158.297625,VS0,VE100\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 2130\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2130,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"3b1c22626042aeac354ad7a2207167cc","sha1":"b79ada12bfb8aa3d365621c367b48b25180a572d","sha256":"ad4b93b6d147d60e896f54090455c41c9a7e4842324904dbb7ddad689451d316","sha512":"aa5dadaab6c806ba3520c3bc1943561a410c2dab627e0c091c97ab16a36b45bc5c3888fd82325b9a33646389219cbd65fa61ae1469d06fecf477af3a13c8f620","ssdeep":"","tlshash":"854195cb55d11af16529f4400b383bbed025d015a958fdad23845b4bdbb363accc829a","first_seen":"2025-08-01T10:29:49.574088Z","last_seen":"2025-08-01T10:29:49.574088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":184,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/ymCn74H.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /ymCn74H.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:54:16 GMT\r\netag: \"f5faad4c68f64293c39b79397bcc055e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: vjFHzTSqzJCckx75HBr59a1jKNMwnq1zp9CRc8uxPXNu6Jev0TIFyA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1268620\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kiad7000057-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 43, 0\r\nx-timer: S1754044158.297697,VS0,VE97\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 8985\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 258 x 258, 8-bit/color RGBA, non-interlaced","md5":"f5faad4c68f64293c39b79397bcc055e","sha1":"033dc45748d41bb6858fd969cd4bc23f8c782d84","sha256":"bb8606213b62170724558667f5e4d4db5af9ce1345ecee1dc5ec0a40e6217d80","sha512":"054cebc69a526739db73949cd53e01c5f39b762ab89aa17ae431c3c8505674629f1f51a1f62ec82c971a42cb89ec09dc8f2adf5cc2bb1236f9b4be1377e4a2f4","ssdeep":"192:TnVHxYyOWv6hW9y5EAYTM522qi1nhv1MU8yN:TVHWyvh9mjeM524t","tlshash":"ee02bf5ecc5bf409c91cc26ae1e836f464acbca700e906f67522b84560ec6d1c47e2fb","first_seen":"2025-08-01T10:29:49.575584Z","last_seen":"2025-08-01T10:29:49.575584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":181,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/itweak.vip/index.html","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:19.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /itweak.vip/index.html HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nCookie: _ga_NZD0ZCXE6Y=GS2.1.s1754044159$o1$g0$t1754044159$j60$l0$h0; _ga=GA1.1.1728693711.1754044159\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:19 GMT\r\nserver: Apache\r\nlast-modified: Thu, 13 Feb 2025 17:06:38 GMT\r\netag: \"13e2f-62e0914cb4423-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/html\r\nvia: 2.0 alproxy\r\ncontent-length: 8473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81455,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (657)","md5":"ac3ae37c608c2ac58454d09e2445e393","sha1":"9fcc4afd80789efb4f08484f0e203db2e975021d","sha256":"e98941ca038ad990925b93d64d02ee646ddfeb555d580da4bd679aa74ea02ed5","sha512":"05867759475d4f4b3262b3a77a42576382d36efe8980ddd879cef35ee90d434bb470efdacb59eb12dcd66617d0158550eec14be4e4e7fd846ee76938c27d4efa","ssdeep":"384:FK9QAOQqoC+FBM4/JLyxOMQcF+NfARwU7TEr8hQYQcjEbVN8:ux7JGxO2kKwUEYQ9o","tlshash":"3683ae7294c76973d30778cee934b759b2e2d32fca17a94065f873b4abc6ca4b902411","first_seen":"2025-08-01T10:29:49.523206Z","last_seen":"2025-08-01T10:29:49.523206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/r9FHmOm.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /r9FHmOm.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:52:38 GMT\r\netag: \"a24ab8908178c7ac3be7725aa2cb151c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: oPwtNkGFZR7yDH_XdPRjLkQMFsFOQA0Nuro5s1EE4R9kvRLrM-9-tg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2069243\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kcgs7200137-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 73, 0\r\nx-timer: S1754044158.298807,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 5002\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced","md5":"a24ab8908178c7ac3be7725aa2cb151c","sha1":"6ffa5e1f6bcc7d51ed10cb5e597d7661b15bb362","sha256":"889aed1b4e2b84dd12d2168a3d9ae7f95e63fab6ed675eab37e591bf89dfd347","sha512":"95a24e18c5c1cd7b255bac21a2a6cfc4c52f6ef1f7e428e0970dce9ffa71fd9e687e1d9ceb99a9d6ebe70836161b25180d2d351d4dfe551fd562454e19acc2b1","ssdeep":"96:e9WKoN8g43iET9EpwlBKg+X2WU4srcIPPboa4y:DKY4399OKLyWcIXMm","tlshash":"fea14ba03ce4a07b705e136a91d1b2b7bc08dfe0d144de8036cd499b29deb601463d5c","first_seen":"2025-08-01T10:29:49.577285Z","last_seen":"2025-08-01T10:29:49.577285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":193,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/eDNPl6O.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /eDNPl6O.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:53:35 GMT\r\netag: \"7f7711b3c564557ba169b6eeb329cba3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 5_YuBPyoE8dgCRubBsY9bt9AZHJIJtJhkhpdjQZUP85XO01t8BdH6A==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1317543\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kcgs7200101-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 48, 0\r\nx-timer: S1754044158.298006,VS0,VE97\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 17290\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":17290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"7f7711b3c564557ba169b6eeb329cba3","sha1":"1c09a7d4f526959262e6af4032f98b490dad1cb6","sha256":"ec909de059cd9ae36344d139c03a296e03cbe945e31b74ccac6f0ae4f92d9eb3","sha512":"c1ac798163d1d00615458e84dc42092fdeec04406724a6629087743e12cf68159bddfad15da521dcb2662d4d323e1329f94dd1766e9280a38a5fda9f46fb50e5","ssdeep":"384:cXsKa2BiBhkym+QSeNruGyof+g/1CY0jMXUAoC0amOb2H:vKpBmpmWgunofXCY0YkFJg2H","tlshash":"e072c057ab16d3813e681249d38fc31b53cd751aa68796248177bab32a0af07d43087f","first_seen":"2025-08-01T10:29:49.581225Z","last_seen":"2025-08-01T10:29:49.581225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":184,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/CrwPL2W.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /CrwPL2W.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Jul 2024 13:54:05 GMT\r\netag: \"a07bb1a9d8cafb80b49d2e3c3b3113da\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: ATL59-P13\r\nx-amz-cf-id: liT36t6te-Hw_fr0tU7kxzG3-fozG9gUbgWiTgfil9ZqEnDvQXGPPg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2053887\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kjyo7100149-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 72, 0\r\nx-timer: S1754044158.298310,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 35503\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"a07bb1a9d8cafb80b49d2e3c3b3113da","sha1":"380e7052ddbd838d8cb0827f45168ad24f41b152","sha256":"8ca6d535b2d0c9cb998e18cd38da43a31ccdbf4ef7ea06d12ab7ebaa1564d4f0","sha512":"16b20b8c35a70ab5b27c46bb92dba15d3a8bba0215a035f92d24cae6b58370cc1ea0dd4feafcded58d92522e35b0ea8bd324d81ad119061a4f25f13dec3b22d6","ssdeep":"768:TzYSTOpQOxgziZ1pEqP6pk0hlNwqDjenGuKKGmdk7fAcfssmFvLjUE4G:TDOptxxbEa5cw0kYDZUj/","tlshash":"a7f2bf03ed019b54d9309df1372c95c13e7da5fc1ba35b0b833950b1ab8a6eeb0a7625","first_seen":"2025-08-01T10:29:49.583945Z","last_seen":"2025-08-01T10:29:49.583945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":183,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/x4m1svb.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /x4m1svb.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Apr 2021 10:45:41 GMT\r\netag: \"24a11929d3ae2fb2e48121e0813ee0cc\"\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 4B7Gbn5RwVl5oyfPGZYdBUQP7BPQiige9DccGq8ua1u6W01BUyYNQQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 250469\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nx-served-by: cache-iad-kcgs7200147-IAD, cache-hel1410030-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 9, 0\r\nx-timer: S1754044158.273795,VS0,VE98\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 7629\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 143, 8-bit/color RGBA, non-interlaced","md5":"24a11929d3ae2fb2e48121e0813ee0cc","sha1":"a8c68c5397f4a6656a245c46a85eb3ce4b5b71e0","sha256":"d3e25aae688ee8db76c8c07fa75ca28890831b30e90f89f337ff46aa654cda35","sha512":"afa5597ffcff8ba010ab174a75e274053d29583bbfaffa5cf79bb63adf154087fb10fe6afb7a7788f119a06aa9984e32de03b64d7db06d593de68bb5a0512848","ssdeep":"192:BklcS8+LEkPoCvkvA2KLkBXEnKUEBDDnNlWxRJ0UO4N:S/Hgmg0WeKhDjLWl0A","tlshash":"41f19e774b813dec966d3c9208c42a028c0b3de91a53fcf2dc46f1abe032b05daae511","first_seen":"2025-08-01T10:29:49.586897Z","last_seen":"2025-08-01T10:29:49.586897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":157,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckfed.com/cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.js","fqdn":"duckfed.com","domain":"duckfed.com","tld":"com"},"ip":{"addr":"185.31.40.13","port":443,"asn":60362,"as":"Alwaysdata Sarl","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckfed.com/itweak.vip/index.html","date":"2025-08-01T10:29:18.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duckfed.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 06:54:27 GMT","end":"Tue, 30 Sep 2025 06:54:26 GMT"},"fingerprint":{"sha1":"40:4C:AB:F9:3D:6C:07:E7:46:BC:11:F8:C0:EC:88:85:B7:91:AE:9E","sha256":"25:B9:8D:10:9E:D3:05:8B:B3:1A:C2:74:68:B2:54:F3:C9:55:28:94:2B:95:E6:9B:A3:CD:2D:68:8A:DB:E8:D4"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.js HTTP/1.1\r\nHost: duckfed.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duckfed.com/itweak.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 Aug 2025 10:29:18 GMT\r\nserver: Apache\r\nlast-modified: Sun, 30 Oct 2022 15:33:02 GMT\r\netag: \"c897-5ec4234de5dce-br\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nvia: 2.0 alproxy\r\ncontent-length: 15128\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":51351,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c1ff1650bba6e39089834e708129d723","sha1":"7d1cea058027485e9ccf1a92e38823acb05c0659","sha256":"7dfc3ef73c1284c7aff3c5cdac3812d212c8b899037d7860c8ba20a1defb9a7f","sha512":"94eb43018f4a313d561fd171e894ae64b1f18c2f30988071b0d14bea024f686eec2c856848ef720ab6963b0a8b2d7fadc6c3b0d21d9c1ef71426524fbcc968b7","ssdeep":"1536:9RCJ6/KpVsnUMxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277a:9j/FjzarzCT71Pts","tlshash":"e133a5497ce771264a13f0aa67ef7445fa26c42b2315d440f89e432c2f91f6442bdeea","first_seen":"2023-03-07T01:10:20Z","last_seen":"2026-08-06T00:40:49.144234Z","times_seen":2381,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}