Report - l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

Report Overview

Submitted URL
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html
IP
104.18.80.149
ASN
#13335 CLOUDFLARENET
Submitted
2022-11-07 22:16:39
Access
Website Title
Final URL
Tags
None
urlquery detections
Scam / Brand infringement

Detections

urlquery
8
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.8 kB	57 kB	34.120.237.76
l.diligentglimmeringmobile.shop	unknown	2022-10-19T09:48:18Z	2023-01-24T15:47:24Z	6.3 kB	84 kB	104.18.81.149
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	1.7 kB	4.4 kB	23.36.77.32
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	682 B	1.6 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333 B	229 B	34.117.237.239
gauvaiho.net	285509	2021-03-26T20:00:47Z	2023-03-10T09:36:11Z	354 B	28 kB	139.45.197.251
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606 B	127 B	34.218.164.174

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-07	medium	l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html	5.1 kB	2023-03-07	2023-03-17
Pretty URL l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html IP 104.18.81.149 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:08 Last Seen2023-03-17 12:36:17 Times Seen1 Hash 525ec19367d32a972c9b0b809bc40ce3 ce3e521792b573fc33bbdaf50beafd6116a5db57 64e483e274e6d67bacab0910568ca49c57ced982cdec8b5b856c9b2724f27f3b Loading...

	gauvaiho.net/pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js	78 kB	2023-03-10	2023-03-13
Pretty URL gauvaiho.net/pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 18:55:30 Last Seen2023-03-13 05:41:40 Times Seen1 Hash b889112f22c9adb498e7f3ec64ebfe7a c2734bb05dc42c43a36e6f594064f3cc84d853c9 0091781d32fa208d9cb4ad29cd18a8ac200d3a505f2c7df847573eb05c6a47f6 Loading...

	l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html	473 B	2023-03-07	2023-11-09
Pretty URL l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html IP 104.18.81.149 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:08 Last Seen2023-11-09 20:00:14 Times Seen2 Hash 2622ed9b0e4f404a0840dea7612049d7 a5badc5a1a326d1d4d43e00a542ed59e74da6737 6893a450346a7e15326f97cdbbc544a85d8fc75d09b86b9f9dc2aff2120e3ce4 Loading...

	l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html	417 B	2023-03-07	2024-03-02
Pretty URL l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html IP 104.18.81.149 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:08 Last Seen2024-03-02 05:42:27 Times Seen32 Hash f196e83df31ca06898c788b9c1af80f8 b554e97df8022295e8ff46a18117c38778bf2b1f 9a2ac5de661445b572a7c7c20e08fca8f3957f4367f61840d7baebf88badc351 Loading...

HTTP Transactions (34)

URL IP Response Size

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

104.18.81.149

200 OK

5.0 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Size
5.0 kB (4953 bytes)
Hash
d4dd95a0a8b4a758101687df3b3a194c
cf46fcbeba4241ee527652eeb56c87e6e0e57f36
876ca3baf88024b6775de56a06918729b5079e74a3a57bc17dfec0a3c62bd40d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wbsweep/es/wheel/index-es-mercadona500.html HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 07 May 2022 04:49:26 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2FdUD7Cb2aqCXvKxlppQ4i8lUFSiiClX9GCzUrIxrYk5BF8oTiOAgDjhqVE1tUpw6T4xaU3OvY2OYlb8Oti1fgytx3z6pOl40ZlYu0DDUaYUX7bEyvi1Gk%2B%2BKmakL%2BrTRLoa5k2cRt5Sa1sssc78or6w"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76696ef5daf5b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c7a8ba48383a0e56baca8c8c41b81a04
b04c1f1e730a71f17ff639c9db697c532d4e5421
7860552382285e6eddddc5226c6f6400caa3f6fc3cb4b8a2d550c6fc653f78bb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7860552382285E6EDDDDC5226C6F6400CAA3F6FC3CB4B8A2D550C6FC653F78BB"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6309
Expires: Tue, 08 Nov 2022 00:01:37 GMT
Date: Mon, 07 Nov 2022 22:16:28 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
9fd081ea88e8b8563986b3e558496d21
60700393dce5eb42c0db0d5feef340f4832e3c65
d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3682
Cache-Control: max-age=134172
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 22:16:28 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 11:32:40 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d8c32b2fb818533a5b3fe5c69157bde9
93594fd3fc50d9d444c28660eabba1edbe4f0588
df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6336
Expires: Tue, 08 Nov 2022 00:02:04 GMT
Date: Mon, 07 Nov 2022 22:16:28 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: gY59R4wmpMRrDXEjM06Ps164grhGkjhs7DPi0KsmFZlNjllN/pA41C5807vTuBItBLHery5hSgQ=
x-amz-request-id: 803XYYVR9Z500MFQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 07 Nov 2022 22:11:03 GMT
age: 325
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 22:16:28 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/style.css

104.18.81.149

200 OK

2.4 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/style.css
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
2.4 kB (2382 bytes)
Hash
fa906ac805fdf6ecc581233414a1fcfb
4186981d44e21be0db86bfe9cf7548009ff034fb
a3ccc420d230fb0c6de7ea30366a86347f02605039da9f12ed6fc3945c11a522

HTTP Headers

GET /wbsweep/es/wheel/style.css HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 07 May 2022 03:44:38 GMT
ETag: W/"2a43-5de63cb5d3187"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m0YSXs9PFDKJbN8p7mlMxwsapCPdiuvXcSF%2FiDz6XeQS%2FNEzkIWBpVAcbdHCqdCxLj7oVznVIoL9jdl3zSR0fWnaV0%2BzM86n0sWY8DCx0kdCm1Tv7i1HmfFs57iGb9ngHE%2BGHE0nDHTWvhpbxSj6LBcW"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76696ef8cd85b51e-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es17.jpg

104.18.81.149

200 OK

993 B

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es17.jpg
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
993 B (993 bytes)
Hash
6883f5c56e55cb76d48b15ad57977649
157a317dfae61d646c1ddc53e44fc8bb1b649844
0d5df76602cd247b86e5a88d668cb823ce90da8fb7c8e5122ba4ee24a1bf8bee

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /wbsweep/es/wheel/es17.jpg HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/jpeg
Content-Length: 993
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:21 GMT
ETag: "3e1-5de63ca56bd1e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W4%2FaxHEwBvu9xR41tC5e%2BCUXEREFoTEVsei1QOBCNsygHIYa4FUE0jqgdg75GVNyNKHHg1gjIfm45hR5LFNela%2BeplVhRBy8TxNtpu0c%2FR8lb2jP0PGtjFwpzWRCIDeKt42Xb1Y7eVpSwwR49BnfLUSn"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696ef9ce9cb51e-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es13.jpg

104.18.81.149

200 OK

1.2 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es13.jpg
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.2 kB (1210 bytes)
Hash
7dd2a2c0cd218e424527c97bb518b6fe
fc1f99dfc1338657e2c64a5dab75577916be00e8
cd29c42b4c2912a0dd8454dd5abe5492792349cf72f556c45aaff2ccb21d2165

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /wbsweep/es/wheel/es13.jpg HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/jpeg
Content-Length: 1210
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:18 GMT
ETag: "4ba-5de63ca276f94"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=csP00Nse10xJ8mcnJE4EsLm5pbAYWcrREV0TJ93vVOKteIIh%2BeK05kwTrkYvrhbwiZ0zNiUgRumWwcndXmRlcbEnmIJKjq8QbGPakwQL57gFM9C6pH4AwzHGRfpzZINGeQQ0bR59NNh6TFJ8QwEshhjm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696ef9ca34b4e8-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es12.jpg

104.18.81.149

200 OK

1.0 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es12.jpg
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.0 kB (1027 bytes)
Hash
c3f47559b409f1a96f43b7aaa72b0df8
456ba96aa37b1f54a087d4b99802890ae50f1fd7
f48951fee5671231e1788289afb5363e9257e3e1965a3187f4390f0257700130

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /wbsweep/es/wheel/es12.jpg HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/jpeg
Content-Length: 1027
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:17 GMT
ETag: "403-5de63ca215126"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2Bc823lC1xbX0xBiegDD1d5y9sTb4j1m2gDcrL2WnVb9OgJnshK%2F2XHUp5xf1DQeGezvE87N40Ct0GY46hb89bdfwoAvDY7z3mqvb%2BKsoHrh7fiEPMj1ViJJM1tWvnrxYqMyRQSYR5I55eOqazl5ANVB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696ef9cd13b503-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es14.jpg

104.18.81.149

200 OK

1.1 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es14.jpg
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1133 bytes)
Hash
24d6c9e9e029123ba9879ec566951026
5f305ff0d42372de4f7e6c19e499a972bb5be75c
596ae4e533a5ea7e8801976978e396eedaee307fd0df035e36edff2f3babd034

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /wbsweep/es/wheel/es14.jpg HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/jpeg
Content-Length: 1133
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:19 GMT
ETag: "46d-5de63ca38e463"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5d2ZQv8ETz4NG0zqFXr9EwgZra%2BHnt%2FxwfDaq4N4j51rhkKcQA5mqdXzkAzTtL6Y344IYTXOzGz6LYpX5e7TiWOs96V%2B7DSmAGNQ8pBZIP3krkoz0mGU5yNzUf7SFtdkP3Mj6nvEe17LVLE%2BIx%2FX13lP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696ef9c86f1c02-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es11.jpg

104.18.81.149

200 OK

1.1 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es11.jpg
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1134 bytes)
Hash
5d36b498da89067476a9fd03eeaf729e
76aac3f888571cdc7b61bf728631f7efa5649608
ea5cf3467159b4809e40cc6fb44a8a50e2e893f0e74e437a56ee8b596ae0f57f

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /wbsweep/es/wheel/es11.jpg HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/jpeg
Content-Length: 1134
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:16 GMT
ETag: "46e-5de63ca0f47e6"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rfLenuai%2F%2BPDcZzxo%2B8O%2FyPeHSCv9ASv1%2FYqVhOTK7JSoI5x5gfYPnZk1Uz0T7yZOoC5Lv4usIwqrtFLGXrCnkfktFbqo6nHiVRk%2B4fo7hygvF5ggCW2Yc8%2FBmSTI2vXKpticImjdntFuGd7TAWX48wc"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696ef9cb841bfe-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/mercadona-gc.png

104.18.81.149

200 OK

28 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/mercadona-gc.png
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 262, 8-bit colormap, non-interlaced\012- data
Size
28 kB (27536 bytes)
Hash
5f945f9de234f8dcbcf9b4afe1c85861
a5998d85dcbb14a5faf7d5a62a15acc3b6b98ea2
056c4e4ca44d9a8df24f6184b6f8e408a207e8cae5b8bb6876eaca2509d22272

HTTP Headers

GET /wbsweep/es/wheel/mercadona-gc.png HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/png
Content-Length: 27536
Connection: keep-alive
Last-Modified: Thu, 19 May 2022 08:50:47 GMT
ETag: "6b90-5df59785c0d1f"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kq%2FlGBCSzcyv9SOmrd833mmB9V5D6eIGHMp7aQB2X%2FR2GCKunr0izlBZtD4hCXdf9THY9qppDXQx%2FmeeFEdfJvFKdgpNqtmcPftwtpgcBsGIKStFgIgpmSweHwl015gINSw%2Bm61nWdQtyT8iYwycKN1c"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696ef9b942b51b-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/icon-right-mercadona.png

104.18.81.149

200 OK

225 B

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/icon-right-mercadona.png
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 39 x 28, 1-bit colormap, non-interlaced\012- data
Size
225 B (225 bytes)
Hash
2699329c7be7ec2a964b537eb450dd21
23d979653cc2c3a395ea8cdd0d66dd077a4e5619
122284b3c9c704e620bcfa7929043361924f2e5d482a88b0471f3552976d203c

HTTP Headers

GET /wbsweep/es/wheel/icon-right-mercadona.png HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/png
Content-Length: 225
Connection: keep-alive
Last-Modified: Thu, 19 May 2022 08:50:46 GMT
ETag: "e1-5df59784329f0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lbM483LQKJJwHSioXk47yDxjz9hDERH6EwfN2XYUB337gVrKftfrOAkNMeBEWWC8eOtvH%2BQhCxqf%2BrV1BNogstIwNUjSF6VyV66HWbRIGW2ne758kiW4IoVtyoXsPtRMLRjyNDlPq9Y5mSfbzLDNuKhI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696efacb4fb4e8-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/spin_prize2.png

104.18.81.149

200 OK

1.9 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/spin_prize2.png
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 142 x 173, 4-bit colormap, non-interlaced\012- data
Size
1.9 kB (1890 bytes)
Hash
7036fee4ba5b6009050412490607b03b
a96277e7cd406d8b8cebee70f9da647ed8eb2811
1f94e057950d5af4ab3e59aae248d0b76dd39ebfc0dcc39f3e4ba0ef9d619a72

HTTP Headers

GET /wbsweep/es/wheel/spin_prize2.png HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/style.css

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/png
Content-Length: 1890
Connection: keep-alive
Last-Modified: Thu, 19 May 2022 08:50:40 GMT
ETag: "762-5df5977ec7652"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sndjF%2BGUeXKZyw%2BA2lr2woogSdxoJOKt2HlYUQjYqDoGHkeFNvqtw41PR5LX%2F%2B2mTa8DBDvczbAwW%2BPfrh77SOenf25%2BvihS98GDoQbNsnAvBMxMUW7F4EI0yplJcE6tVbseFLW5qeWICsvw7t2%2FvBR3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696eface35b503-OSL
alt-svc: h2=":443"; ma=60

gauvaiho.net/pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js

139.45.197.251

200 OK

27 kB

URL HTTP/1.1
gauvaiho.net/pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js
IP
139.45.197.251:0
ASN
#9002 RETN Limited

File type
ASCII text, with very long lines (65536), with no line terminators
Size
27 kB (27306 bytes)
Hash
90c4eb43169f8de0f6cc9e4d3bb0ea77
2e425e1b2663f9cf7c70ececa32e8c3934b3289b
a093a3e437453a5da20bebdef3f2afcfcb00af092e8fe17bd053fa6c2cc2014a

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js HTTP/1.1
Host: gauvaiho.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: application/javascript
Last-Modified: Wed, 02 Nov 2022 13:02:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63626a7e-12fd9"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/at11.jpg

104.18.81.149

200 OK

1.4 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/at11.jpg
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.4 kB (1439 bytes)
Hash
cbd3aec9c6d989b1ce2f8456d2536326
5c991f140ada420520b2a0dbd2a43f6b908eb214
d7e57e23dea818de8e6e41e026b4f314c2a58f0e37e15d28ab5606dfabd904e9

HTTP Headers

GET /wbsweep/es/wheel/at11.jpg HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/jpeg
Content-Length: 1439
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:15 GMT
ETag: "59f-5de63c9f71869"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GLU0yuF6jsD8vzjCg3KimlaASdX%2BraxU16z0rPrE%2BeSNew9cgRbuyeAiowLIR0%2F%2FwcDoRzBjE1zXC89F%2BywO%2BcpSZhXVNzUn1SNz3%2FWmpJSvyFOJtCiihbqqKgNMORjgoHNQ%2BujGcGx%2BSxOI9z6wo62h"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696efb1ae4b51b-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es15.jpg

104.18.81.149

200 OK

1.1 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es15.jpg
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1053 bytes)
Hash
c9a8ec833d9629d6c408a4da84484baa
0bd7bc4fccff4cd4005011fcd7c2fa739541823c
6ec7d6b2eaab3aad6d8d922b76b4471c7ffa8d87082c258aa0473e6abe053de7

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /wbsweep/es/wheel/es15.jpg HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/jpeg
Content-Length: 1053
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:19 GMT
ETag: "41d-5de63ca3f4d09"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hP%2BbOiHnLeEe4SDvWK0Cfm0hJkSNcOvLl1oDDHfer%2BsVXIzZZa5qiavUWDIp%2FmEp%2B9XAxAPu3JWgf0z7bsifgRniKjvSFVQKi1DGjs6KMHEAWwWSX3SgaYt%2FgDZJQbn%2FBs0otZnxPwuuYNEXqqx3GJ87"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696efac9711c02-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/menu-mercadona.png

104.18.81.149

200 OK

206 B

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/menu-mercadona.png
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 40 x 36, 4-bit colormap, non-interlaced\012- data
Size
206 B (206 bytes)
Hash
3a5e1e6d66b99201259fb4f1602fd031
749dc84955fd7e2ca7e48157fe96f4dad1b695ce
622b4389f20edae464dcdb5445f1389ed58e1585bf7b11136e67c107e3b838dd

HTTP Headers

GET /wbsweep/es/wheel/menu-mercadona.png HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/png
Content-Length: 206
Connection: keep-alive
Last-Modified: Thu, 19 May 2022 08:50:42 GMT
ETag: "ce-5df597803cef7"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EEfgWiAgSWFYhj1UTIEsujIBtL9ADTjASUv965l6uWsbe3rY1Vqm78f8PccHpZnTV5Ik7EfHYKUSCAxwuy8yc5CsZpA8h%2FabIFBFt51gTW12f%2F31fOZKQH%2FCB9EouqpxwSdKQJrSbdk6ihE3BLQHGktA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696efacfbab51e-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es16.jpg

104.18.81.149

200 OK

1.1 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/es16.jpg
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1113 bytes)
Hash
75002fe6a58dfda6bc73530442733cc4
79155f33a3bca7cbc31f3d4161c63b65f613cb90
b0a9d5347916f60ec87fbb022c06e191e05955114d78803244d979917c92804b

Detections

Analyzer	Verdict	Alert
urlquery		Scam / Brand infringement

HTTP Headers

GET /wbsweep/es/wheel/es16.jpg HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/jpeg
Content-Length: 1113
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:20 GMT
ETag: "459-5de63ca50a681"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hvf5RjbFh0cIcMMzRIYadHqWwU%2BAvlM1kbO87w5xywsMcz0ubfIWgaQSDvOczXMixsox5gSWkO2Qdrny7w5kwI7aeFbVUocg36TUZ%2B9U3Md75k2rA86yJ%2FrDpKI0%2FfZQlBhEhFHP25zu%2Be%2FGW8ZkesXA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696efaecad1bfe-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/gift.gif

104.18.81.149

200 OK

7.8 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/gift.gif
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 70 x 70\012- data
Size
7.8 kB (7819 bytes)
Hash
0d61554227445957833d5a59fb50720c
b6717ef98f131eeb1bca21a53907e31ea939177b
6267cfe381b8def516dc6d81a4a099350d66236c18c605c7059456cd48d26e99

HTTP Headers

GET /wbsweep/es/wheel/gift.gif HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/gif
Content-Length: 7819
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 03:44:22 GMT
ETag: "1e8b-5de63ca6835d5"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RVOmh950plZe702Ll5n4Ln9K%2F%2FKGaa%2B3JH5uLncu%2BkS0KmCkRIdXCn2w%2BGjSqnJkyl%2FtDwG4nIEjmibx0hJehQTw7FPH0%2BFqJxrDYA%2B%2FuQchbKK5sPE384%2B0kCd0GqM9BF2ClUTb5xYYYxitg5XGYHyK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696efb2bbfb4e8-OSL
alt-svc: h2=":443"; ma=60

l.diligentglimmeringmobile.shop/wbsweep/es/wheel/mercadona-wheel.png

104.18.81.149

200 OK

19 kB

URL HTTP/1.1
l.diligentglimmeringmobile.shop/wbsweep/es/wheel/mercadona-wheel.png
IP
104.18.81.149:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 330 x 330, 8-bit colormap, non-interlaced\012- data
Size
19 kB (18729 bytes)
Hash
33b58515448fcca68d8c8ff32d6756b5
fd70574da27c49b575655ebb714e4c90426b5a61
33c7e665207d98984ea9b5ca6dc73aabb123ba75200c29a37a1ce6682a10c4c2

HTTP Headers

GET /wbsweep/es/wheel/mercadona-wheel.png HTTP/1.1
Host: l.diligentglimmeringmobile.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://l.diligentglimmeringmobile.shop/wbsweep/es/wheel/index-es-mercadona500.html

HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 22:16:28 GMT
Content-Type: image/png
Content-Length: 18729
Connection: keep-alive
Last-Modified: Thu, 19 May 2022 08:50:47 GMT
ETag: "4929-5df59785bb72e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ctUi4UlEz80NIg%2Fyp%2BG2%2Fndp3%2BSGgC6I8DiXMCgZnp2JDs5ng2N0BLbodGOW5vkrWU3ZgsxDy1Ik5pQ4twTZpkee9%2FJsyvRDiZXFsRv6DK%2B3B8i0VQcfX5OYAWp%2F58tlUkz81vNx8KkvFJf8g93aUTOb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76696efb2e79b503-OSL
alt-svc: h2=":443"; ma=60

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
e6f4643306be10417c47176a6e67306f
940a13818904add9e1cacd12610f37ba1efd7bc5
67e51095b5da59b3eeda8a28c81789e69064a0a19a93347c2fcb05fd4b21e6d0

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5577
Cache-Control: max-age=130994
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 22:16:29 GMT
Etag: "6368caa6-1d7"
Expires: Wed, 09 Nov 2022 10:39:43 GMT
Last-Modified: Mon, 07 Nov 2022 09:06:46 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

34.218.164.174

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.218.164.174:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: omsqi5ArjBU34gZ2NUa8LQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oLlJzY892rBI9qtUNROgs83hxzA=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6099
Expires: Mon, 07 Nov 2022 23:58:08 GMT
Date: Mon, 07 Nov 2022 22:16:29 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6099
Expires: Mon, 07 Nov 2022 23:58:08 GMT
Date: Mon, 07 Nov 2022 22:16:29 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12662 bytes)
Hash
b64fcd58491917edfc8ffb57c1382cd0
edf97aab58dacd11fa52924b1382c2bf1ede5e55
a2c60a2f7780085b4643ab7f521fb6c858ca72c3170e6f3acd2250b9c3b14cc5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04c2a414-09eb-4daf-8bae-fe6a84f6406e.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12662
x-amzn-requestid: edaa58fb-c3eb-4af0-ad32-be8c7cf14421
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKLHSBoAMFsxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a40-4c35cd455ff7a829756eeb56;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7FjjrCP8dJDZrk38J0SqWxN2Ya4O3-hcO_uW5ULwOQTREh4-MU_szA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:01 GMT
age: 2188
etag: "edf97aab58dacd11fa52924b1382c2bf1ede5e55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6099
Expires: Mon, 07 Nov 2022 23:58:08 GMT
Date: Mon, 07 Nov 2022 22:16:29 GMT
Connection: keep-alive

34.120.237.76

200 OK

5.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53771fc6-60e5-4f18-8cc7-e8411e2b99d5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.3 kB (5325 bytes)
Hash
bcff76df653cc2141d328013181ada9e
9343a49b3846f73e34d32a6bc7569a1c67e89894
affab8aead0d38958a7232bb8a866fffdb85b243174968f6b1bea220ae0152d5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53771fc6-60e5-4f18-8cc7-e8411e2b99d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5325
x-amzn-requestid: 6fe63702-6974-4a3d-82ba-9636858f1f7b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQA1cHPxoAMFjCg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697b55-593b06387844528377de364d;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:40:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OB6d0TSPKYdCWXWN_FS9QJmWuC_3Hj2x7ZdQHO7ZCpUjPTgmLM8zhQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:42:26 GMT
age: 2043
etag: "9343a49b3846f73e34d32a6bc7569a1c67e89894"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde9b751e-0e32-4ea5-900c-3462f6158d52.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.2 kB (3227 bytes)
Hash
72231937a3dcac7e725011cda50e6a5e
13e766c1e33f7d880985a52ad2b8c9a90b63551e
3e5bd9710e41ceff548e4f08a0aacc4ef2f4d790c307b2ab87f38c6ecd72447f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde9b751e-0e32-4ea5-900c-3462f6158d52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3227
x-amzn-requestid: bfacf4b1-4364-476a-958b-3d3d461fcedc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQALBHzYIAMFg9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a46-5d8c327759b3b17f0ff22c2f;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:06 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p0MOUwClrulAvPHnCT105dlm3ToeJTZ8MuEz2R8rSsFtD33-3gFSYQ==
via: 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:42:41 GMT
age: 2028
etag: "13e766c1e33f7d880985a52ad2b8c9a90b63551e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10462 bytes)
Hash
4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: C7GYpM3mXSf0hVyGO9Zzlxa3IHXHdyPlXsvr3i0GoQnaPZF6lO-OwA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 06:28:00 GMT
age: 56909
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5ca2e26-8d97-41c7-ab13-0a83acea6fba.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.3 kB (4266 bytes)
Hash
25906fd46cc175d22a26b74f6818276c
04ff44aae159949934dab236a859d47605229416
71c54baaeedf1f95b24b118e0e788b516847712cc81704520cff58b22a8e3b76

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5ca2e26-8d97-41c7-ab13-0a83acea6fba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4266
x-amzn-requestid: 928296aa-883a-45a1-adc1-b4bb1d8041fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKMEnjoAMF0Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a41-4bf2d24e089a9b19178bac8b;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zwRduDxZEm86Lgipe3Ae9_ZV8UKfQrC75gYvJGrDcenEO5v4TppG9A==
via: 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:39:56 GMT
age: 2193
etag: "04ff44aae159949934dab236a859d47605229416"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.7 kB (4737 bytes)
Hash
39446652ee66d20bd73df20f1a29589c
349ea78f3ad0f2f7376ba22e417226b2e06806d7
655a00944a319ba167e99b43055044cb18bc48d53605ff0d1b6c8b1ba8ee8237

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8786d2a2-d21a-4bb6-916d-7fce27ea08f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4737
x-amzn-requestid: ad230e08-9f4e-46cf-9a86-f8e013a1c498
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQBFkEhLIAMFq_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697bbd-7e8b686a23a84c5d473c9ef5;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:42:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FoOPmZEjC6nhw801dgqENVL-9-aC0pyFAF-fMS57XzQyfxck2GGUvA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:49:14 GMT
age: 1635
etag: "349ea78f3ad0f2f7376ba22e417226b2e06806d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a2bb539-06cb-47fd-8d3c-7043929bfeaa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.3 kB (9336 bytes)
Hash
71473fb15e07b9c973e7368bdd2c2eb7
e5e369ed7b77ff7639bffc16da2f2ca6c035421c
a7e72e22f9d0204e2be1f21fe1c66c8469c5b14ef3b4c64f3cf2335ba5365618

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a2bb539-06cb-47fd-8d3c-7043929bfeaa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 9336
x-amzn-requestid: fb33f029-9d6c-40df-aab2-bdb139d8dedb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKOGdEIAMFujA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a41-53c235ce324b4e896b401a40;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zP8bp-rTtlDnlSAnPdZNJL19gSEfS9HmA9WUgNx4jku9i1zoahW-og==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:01 GMT
age: 2195
etag: "e5e369ed7b77ff7639bffc16da2f2ca6c035421c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (34)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type