Overview

URL maklj.unantlcipatedlucks.com/c/1f0a2cb367c37dee?s1=21635&s2=1308821&s3=106&s5=direct-offer-fallback&click_id=b7bef1111cfdb4e264cd535edbdd555ff96006011b17edf944af7a260d573bc2&j1=1&j3=1
IP52.19.101.114
ASNAMAZON-02
Location Ireland
Report completed2022-10-02 22:17:04 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-02 2 maklj.unantlcipatedlucks.com/js/pushjs/1.0.0/subscriber.js Phishing
2022-10-02 2 maklj.unantlcipatedlucks.com/js/pushjs/1.0.0/utils.js Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

URL cdn-dimi.akamaized.net/landings/274823/1659024719/images/amazon.png
IP  184.31.15.107
Magic gzip compressed data, max compression\012- data
Size 10017
MD5 fa9987a23f5a9d865766e952511baa30
SHA1 f2e620b99ee61a01671ba6a9e22ca75d58a1b52d
SHA256 655daa1e20bf3aff16bc8462339dfea48c7ea5d3dd3505937015af3586d15fb7
Analyzer Analysed Verdict Comment
VirusTotal 0/0


Passive DNS (12)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-02 15:44:45 UTC 93.184.220.29
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-02 05:00:42 UTC 13.224.222.16
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-02 04:45:21 UTC 34.117.237.239
mnemonic passive DNS cdn-dimi.akamaized.net (30) 0 2022-07-07 13:18:25 UTC 2022-10-02 15:23:17 UTC 184.31.15.107 Domain (akamaized.net) ranked at: 280
mnemonic passive DNS ocsp.pki.goog (3) 175 2017-06-14 07:23:31 UTC 2022-10-02 05:01:45 UTC 142.250.74.3
mnemonic passive DNS www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-10-02 13:12:44 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-02 10:20:02 UTC 35.80.175.197
mnemonic passive DNS img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-10-02 11:24:29 UTC 34.120.237.76
mnemonic passive DNS maklj.unantlcipatedlucks.com (3) 0 2022-08-09 09:52:51 UTC 2022-10-02 18:40:43 UTC 52.19.101.114 Unknown ranking
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-10-02 16:25:36 UTC 13.224.222.70
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-10-02 05:33:45 UTC 23.36.76.226
mnemonic passive DNS cdnjs.cloudflare.com (1) 235 2020-10-20 10:17:36 UTC 2022-10-02 11:24:40 UTC 104.17.25.14


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.19.101.114

Date UQ / IDS / BL URL IP
2022-12-04 09:01:05 +0000
0 - 0 - 10 www.mydataanalisys.com/redirect/index?type=sc (...) 52.19.101.114
2022-12-03 23:00:49 +0000
0 - 0 - 9 www.mydataanalisys.com/redirect/index?type=sc (...) 52.19.101.114
2022-12-03 22:59:45 +0000
0 - 0 - 3 dgdmmr.prodlgiousdates.com/?utm_source=da57dc (...) 52.19.101.114
2022-12-03 22:56:12 +0000
0 - 0 - 3 www.betads.space/c/da4967c3ef39ad9d 52.19.101.114
2022-12-03 22:00:42 +0000
0 - 0 - 10 www.yourdatareport.com/redirect/index?type=sc (...) 52.19.101.114

Last 5 reports on ASN: AMAZON-02

Date UQ / IDS / BL URL IP
2022-12-04 09:01:05 +0000
0 - 0 - 10 www.mydataanalisys.com/redirect/index?type=sc (...) 52.19.101.114
2022-12-04 09:00:55 +0000
13 - 0 - 2 wwoo.getdesktopprotection.site/c/49d5a94ec660 (...) 52.51.27.131
2022-12-04 09:00:37 +0000
0 - 0 - 2 ads.istngo.com/80c8b559-6fd1-41ab-aee4-f52662 (...) 18.195.123.247
2022-12-04 08:56:19 +0000
0 - 0 - 2 rb.gy/zrucqt 76.223.86.4
2022-12-04 08:55:57 +0000
0 - 0 - 2 www1.myosites.org/?tm=1&subid4=1670144134.018 (...) 99.83.136.84

Last 5 reports on domain: unantlcipatedlucks.com

Date UQ / IDS / BL URL IP
2022-11-28 21:46:27 +0000
0 - 0 - 2 maklj.unantlcipatedlucks.com/c/1f0a2cb367c37d (...) 52.19.101.114
2022-11-27 20:53:55 +0000
0 - 0 - 2 maklj.unantlcipatedlucks.com/c/1f0a2cb367c37d (...) 52.19.101.114
2022-11-27 20:53:47 +0000
0 - 0 - 2 maklj.unantlcipatedlucks.com/c/1f0a2cb367c37d (...) 52.19.101.114
2022-11-26 10:58:13 +0000
0 - 0 - 2 maklj.unantlcipatedlucks.com/c/1f0a2cb367c37d (...) 52.19.101.114
2022-11-25 13:15:18 +0000
0 - 0 - 2 maklj.unantlcipatedlucks.com/c/1f0a2cb367c37d (...) 52.19.101.114

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-12-03 10:53:02 +0000
0 - 0 - 3 6c1d1f1b0.srtrak.com/promo-tools/direct-offer (...) 91.132.60.212
2022-12-03 09:25:20 +0000
0 - 0 - 2 3d10f9b7a.srtrak.com/promo-tools/direct-offer (...) 91.132.60.212
2022-12-02 04:13:09 +0000
0 - 0 - 3 fed38366c.srtrak.com/promo-tools/direct-offer (...) 91.132.60.212
2022-11-22 09:44:32 +0000
0 - 0 - 2 maklj.unantlcipatedlucks.com/c/1f0a2cb367c37d (...) 52.19.101.114
2022-11-14 16:07:55 +0000
0 - 0 - 1 d9174c3f3.srtrak.com/258-896-3-2517 91.132.60.212


JavaScript

Executed Scripts (18)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (57)


Request Response
                                        
                                            GET /c/1f0a2cb367c37dee?s1=21635&s2=1308821&s3=106&s5=direct-offer-fallback&click_id=b7bef1111cfdb4e264cd535edbdd555ff96006011b17edf944af7a260d573bc2&j1=1&j3=1 HTTP/1.1 
Host: maklj.unantlcipatedlucks.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         52.19.101.114
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Sun, 02 Oct 2022 22:16:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: unique_id=633a0dd4000c3c00; Path=/; Expires=Thu, 01 Dec 2022 22:16:52 GMT unique_id2=6339f081000a465c; Path=/; Expires=Sat, 31 Dec 2022 22:16:52 GMT 6339f081000a465c_c=1; Path=/; Expires=Sat, 31 Dec 2022 22:16:52 GMT ref_token=21635; Path=/; Expires=Tue, 01 Nov 2022 22:16:52 GMT impression=; Path=/; Expires=Sun, 02 Oct 2022 22:16:52 GMT 6339f081000a465c_sl=[274823]; Path=/; Expires=Sun, 16 Oct 2022 22:16:52 GMT
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5952)
Size:   7391
Md5:    bf1c1b1c7f328f7858d90dcdc09c2e7d
Sha1:   d05c4727417f16a218c28d87fdbb45a7db3210a3
Sha256: ffa6071ab4c9704d1e1ee5e0aa262b658fde6fc288c52ccaab2a3bfdeb3897e9
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         13.224.222.70
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 22:03:21 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b6a92d65d66a7dd6d685a94e79bd1aba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-C2
X-Amz-Cf-Id: CyTYRh-qAJQMug4mGSO0gfod8ujOL_MdyoY5-hh27jV1FJl7gaQ-wg==
Age: 811


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17178
Expires: Mon, 03 Oct 2022 03:03:10 GMT
Date: Sun, 02 Oct 2022 22:16:52 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.224.222.16
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:33:17 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 2063ee702f4d3bcc9a2d5c54fdebd6e6.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-C2
x-amz-cf-id: OeOO3Yz7LZkVTAxlE0V7Tny2xbML_nAFo6GbOlrdmlMHUEmGCr48vQ==
age: 67416
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 02 Oct 2022 22:16:53 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ajax/libs/flag-icon-css/2.3.1/css/flag-icon.min.css?1659024719 HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Sun, 02 Oct 2022 22:16:53 GMT
content-length: 1437
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5d-82c9"
last-modified: Mon, 04 May 2020 16:10:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 10029956
expires: Fri, 22 Sep 2023 22:16:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MqU6vKkJVH9VBrS5b676Z%2FCI0aWfcPCUzohUWamf8LwF9oUWijFb2NaFrYQCd%2BErNUOs5r088dckZaHl7m3eLiXf%2FrfLW0LcWwlStX5C65vYmVFulnBl%2FdKQ0Qk3UX01%2BTkMhMqE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7540ce13d897b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (33481), with no line terminators
Size:   1437
Md5:    c746f08db774e18f2f373259757c049d
Sha1:   9f8af413480986624e7c6c2f7764573f1345a7f2
Sha256: f702085f4909b21d240273eb910352557bc0a1bb6a90602bbacf0ec6d1539b6b
                                        
                                            GET /landings/274823/1659024719/css/css1.css?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/css
                                        
x-amz-id-2: A5LxrWkjwD0xqM+CiJrWJP/VKebpZvT2hOtCNTpm3A4nd3sd3RkCj9WbCuC1mIXk0ZFJb1hnVb0=
x-amz-request-id: N2W2WXR4TKTVX537
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "917bc48c02736adf5d457ce32d38984f"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 4264
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text
Size:   4264
Md5:    c13dd1a7a9af2e9d74b7773b78889d45
Sha1:   f77b6ee1f51c972bb831622034a6d60940df952d
Sha256: 76ae633a248be5d64e6f2d88d51adb4e717129c1c5246cab522f6dfd685d9758
                                        
                                            GET /landings/274823/1659024719/js/p.js?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: 5zc6OcWXv5UHrhJ40+shDtziUG0fY1CHxDFqCdYQGMOCcRgp74ftVw0tEVOc4ACy71gjTlaTGoM=
x-amz-request-id: N2W64XDZ8M7RBHGW
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "c5a80322118eb860587ac31fb6d38f8c"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 7471
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43", h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (4813)
Size:   7471
Md5:    a63cbb7d85afc9270430b057e8676881
Sha1:   26484b6f98eb16889757313f8f993ae53bac3172
Sha256: 6741249e2e91d68c90eaaa0c82c10d1ce5dd2643963ec35486d460f71d7775df
                                        
                                            GET /landings/274823/1659024719/css/all.min.css?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/css
                                        
x-amz-id-2: +xU3n7gC6eIRDhtnZMhm2suTkzdwediJsTxIUiDLFkoS2WMx2DCApiTBkweYpg9wzvQuxWrPdME=
x-amz-request-id: N2W7HKDNAY25R742
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "040431adc5de295638a028ad47c5c915"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 12229
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (55959)
Size:   12229
Md5:    f58513a43fb64acaa272a4beffe54b90
Sha1:   a6a06785d18e37301de7e4b0dd66d91f89e51033
Sha256: c5ede9cf504fff608a5999cee7d847cc4843e18cfb074bc400fe73210f51988d
                                        
                                            GET /landings/274823/1659024719/css/bootstrap.min.css?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/css
                                        
x-amz-id-2: zbXu6gByZwPujBKzr4M/76B2oS1r9UajoK8OcFPRvXL6p4uXT2UDdVaiDtFDJszS7xGB33DyID8=
x-amz-request-id: N2W7CMX62WRYVGTS
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "5690444d158dd6430627aa9545acb7e2"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 22974
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (65324)
Size:   22974
Md5:    6a07af3a57f9a3ff5b9659cbc2576580
Sha1:   c2da1c921fdc089a45821b2003cf6b8debc8e34b
Sha256: d86a46f0d03413866462c026968f5707be7cad2dd1a6bfd049beb825319c746a
                                        
                                            GET /landings/274823/1659024719/js/jquery.min.js?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: 7j6PnBlLPGP0SIzAdZwKxZT3ABEgbPNIi7ACNaqr9glzolcss5d79d0nycv/8JIuGHzfj9otoQw=
x-amz-request-id: N2W8T2RTVP9484MP
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "7c5d886a944957e9ed1cc3c5eba023e9"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 30958
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (65450), with CRLF line terminators
Size:   30958
Md5:    02a0bdad4470c1bae91161c75d321ac3
Sha1:   b1e2b8fbfd9ff0787c6b6d3bec1320af6806ffb0
Sha256: 5fb978d738522be2f2757057e775d9a4380164de930681068a57f9c268c9427e
                                        
                                            GET /landings/274823/1659024719/js/bootstrap.bundle.min.js?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: TLdiDB7zrkm7OPkoWRe/lwe6Gh11YnGJg0BB39Im9t79mPnLq3DbTeNyHqn/M06MOB56X1PFfW4=
x-amz-request-id: N2WC0RCRQ8D9C6HD
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "a454220fc07088bf1fdd19313b6bfd50"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 22291
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (65297)
Size:   22291
Md5:    26a35e8554f5379012cdb3541c056614
Sha1:   6c2ab99fdae64b45ee5de6bd20306ccf74010b31
Sha256: f3d0c6f375c1a8df7151872a097a80894059ea0f8e875f7b1e3d69848e39b331
                                        
                                            GET /landings/274823/1659024719/js/icon.js?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: tbtbjp0IDYEcDfIJoOf0JOiXakrC2pt2zKarOFshfDFaU0AcIXjYTkbKOlWD8KXvXGOLQxsUxrM=
x-amz-request-id: N2W2A5NBD0PDGQGR
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "a8e36248f01478844f0c4db185e945a0"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 2870
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (6570), with no line terminators
Size:   2870
Md5:    bb7499e5f92a57ea9468de063e5cfeb9
Sha1:   79065a992fbd5b562d22237faeaaecf824e58a9a
Sha256: e3f4d03f9df30293e5a1de08eb78922e7756820f7573e1c4fc4eb620e94a52bb
                                        
                                            GET /landings/274823/1659024719/js/1.js?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: ZGMV9P8MUBjO+oySiBnlt4NMxK9gutfWrr6CncIdbbeKeD75lECW6yr4e4xkMXeE549SsVhSpoU=
x-amz-request-id: N2W53MXW9NYA8M4A
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "379d6b5946a6bc3229762d07431e0493"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 12227
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (31405), with no line terminators
Size:   12227
Md5:    e2660c98b04a058eb97417737967b32e
Sha1:   5980f7d9dc33c4808ab0f5376a3b3d6415ef0ee1
Sha256: 2101893037b18121f66b156bb3aacf5028d1eabff145af5cd24f2039c947be48
                                        
                                            GET /landings/274823/1659024719/js/2.js?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: T+8dk/PS16u7NeacmYm4O+5HSItbQJl1VD766JzztP/YW1QXDSiWKAQpguWanEprxjn+2RwzSBs=
x-amz-request-id: N2W6K9CNB871KEJN
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "f2842b66f0609bb742c15afb948eeb06"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 1882
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text, with very long lines (4250), with no line terminators
Size:   1882
Md5:    ba88634172cbdd668cbeee5c18dc0174
Sha1:   d435ada2288888f690844570a1c27e52adc61a8c
Sha256: c81d0145f75a8833713d1c0386bb395e4a5e6ddb912883ab741b951761111489
                                        
                                            GET /landings/274823/1659024719/js/timer.js?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: mOJ9ODDinplzLkSG/xTy1PxW3TLRVxkhqsytQgkX0Mc9UiuhHnw0N7wTjXGJ3Gb4PjciwrD0mkY=
x-amz-request-id: N2W0A8D12Y8EMGX7
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "c2062df2d093cf1e5b7993f5cf5df792"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 530
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ASCII text
Size:   530
Md5:    ec8f295e4f886536b34da8f85e6bcaa1
Sha1:   a5c5436645bd4702dc264db2e7dc8dd97f8102ed
Sha256: 3afdbcd178eabeed3fb1a32b8d7f4e4d41923f4a0e3c96626c477929731b7b99
                                        
                                            GET /landings/274823/1659024719/js/translate.js?1659024719 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
x-amz-id-2: WV2Tu8imal5tkU6e8mQq1KCSYAxZwkmAr60BT1RJXXsoVdiK0XxstnXdKDULdFmSN0QBe+gIpB8=
x-amz-request-id: N2W0KHJ2BJ0EBZBS
Last-Modified: Fri, 29 Jul 2022 07:20:21 GMT
ETag: "99511f09b73a48e5b6b39c3331c267cf"
Accept-Ranges: bytes
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Length: 36057
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   36057
Md5:    e90cfedbf941b0a440f2e25367c16616
Sha1:   b165af4b91e8d9097df7308c064961c007ce2d89
Sha256: bac24c7ccb9d237cb8825a7db7b28e8b17e82e53d3b48f8aea8c65b00b6fda55
                                        
                                            GET /landings/274823/1659024719/images/fr4.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: q36TBwDYPxDQeaYHDPcOudQb8gWA8YeLnITbm8n0AVwFqHfYQUtkOP4QC9M/y7ynAmSQQBppYjY=
x-amz-request-id: WA5Q23XWWQ85V2FK
Last-Modified: Fri, 29 Jul 2022 07:20:19 GMT
ETag: "f96150cbbb80ac607b3f264141a7faef"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 4307
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size:   4307
Md5:    f96150cbbb80ac607b3f264141a7faef
Sha1:   9ed21cb4e5c552f29bc23db55684c945e7582071
Sha256: f013c5f2d9aedd8072d4bf01749c7dfcbacb80a43d06aa579403adfd8fd21fd3
                                        
                                            GET /landings/274823/1659024719/images/fr6.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: WyMv4qu9AqwNnN5l/oVsCWFwdS96jAGk6JKroEABWbTgrVSSeqS5YrpfVs1kj/n6NEsb9JFibRg=
x-amz-request-id: WA5N742EMF8XQ2BT
Last-Modified: Fri, 29 Jul 2022 07:20:19 GMT
ETag: "f17d127dfcaa6f94929eedd080276df0"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2814
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size:   2814
Md5:    f17d127dfcaa6f94929eedd080276df0
Sha1:   ec801473523b8eb44e123b5634081d2b57715ba6
Sha256: 0108e4d428f408f819f174ae8a5923b4010e80a14fc9872b018c12781e114403
                                        
                                            GET /landings/274823/1659024719/images/logo.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: I86CYc3QXwVaEl2HfvMIAa34SBrUt3ViLC3vLKD63J3a2PPR8oKGlUF1PMIHJX/gGTMHYagCrHQ=
x-amz-request-id: WA5TJNA2NMGX7R2P
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "fc685d3d5b3a8931323c62c2726e3f70"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 16015
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 180 x 54, 8-bit/color RGBA, non-interlaced\012- data
Size:   16015
Md5:    fc685d3d5b3a8931323c62c2726e3f70
Sha1:   c64c492ebcdd8560f6da135cafead08cb5eead83
Sha256: c31338ee79084a7671bc947cd8696745b667da7beaf853082d1edf4d33cc8808
                                        
                                            GET /landings/274823/1659024719/images/fr5.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: xxYGqLh4HWAVl28CGDGFEe0LiF2ITSssX2/47EtlG8motV/1mQfki99Ac1rtkrsQ0BtDj2ijd+8=
x-amz-request-id: WA5YYKSWPYZA10QK
Last-Modified: Fri, 29 Jul 2022 07:20:19 GMT
ETag: "7f103bc91a8084cd154189b5ebb2cf86"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3043
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size:   3043
Md5:    7f103bc91a8084cd154189b5ebb2cf86
Sha1:   375e58c42a8c409bbf111847a1f6798ba6c0d5f5
Sha256: 346139aaec984853288672896d297ded47ac7ee1cb77ca43b63e130952cdd946
                                        
                                            GET /landings/274823/1659024719/images/fr11.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: yVjXu1Dy35l+wxrU0lx5dY4+lN1cQzk7NA/EMEMyeEJf0oekNw9dPfZIle6AIePe/u6FfWAdbEM=
x-amz-request-id: WA5ZBQGPAHQ2WY9Y
Last-Modified: Fri, 29 Jul 2022 07:20:19 GMT
ETag: "752f51c4c387c0ca7f4337acdeec15d6"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3157
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size:   3157
Md5:    752f51c4c387c0ca7f4337acdeec15d6
Sha1:   7f9777f95aececfce6fa930181269cce30a4a059
Sha256: 227cec10c842ba3865d12ed22363f87ca5135b3ac2c72e5ab1a3169c4a2d569c
                                        
                                            GET /landings/274823/1659024719/images/icon-basket.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: hBYir0tCrxbnDxZTJMjZWxYLgVUi6UirMIbV267ADZgaFi3pKyn/WDNV+Zsy7QjhYTQKdGA5O7U=
x-amz-request-id: WA5ZMJ1SPK1VX6FG
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "667e116f8cc33ec72552039ae797edb7"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 304
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 38 x 26, 4-bit colormap, non-interlaced\012- data
Size:   304
Md5:    667e116f8cc33ec72552039ae797edb7
Sha1:   2631fa1c55ca0596b747777c55cec1c195472c55
Sha256: d335d48cb2d5e8f679838591b369f37618b48ef445b2bc894cc779bc3f3da292
                                        
                                            GET /landings/274823/1659024719/images/icon_card.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: kBS76HMfQNFuKorsRmqohH1Mtfl3az+RhEsheHMORNtGIuCl+BbIb7JrslTth78500C4tgUKovU=
x-amz-request-id: WA5P5WSWT90SYYHE
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "8e8c708cbfbd63c6871e76775559c521"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 44926
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 465 x 334, 8-bit/color RGBA, interlaced\012- data
Size:   44926
Md5:    8e8c708cbfbd63c6871e76775559c521
Sha1:   b84b9c38314808f74da7099eb140c7965c917bf0
Sha256: fe2439f945184f1dcb8e2687f3aebb10dd7378a2beb4d057830bf706fd4a3c79
                                        
                                            GET /landings/274823/1659024719/images/star-full.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: 2t1MBkg8V+GM/N3jQISNnleoDodwVCS4EVTML+HF4ABqZJ6oFJ6lx0asVTj9buCJ9/Q01Ihu5Oo=
x-amz-request-id: WA5PQQ08E2HGBWY1
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "0a512e142fca20d36f8ed61cc15d5ec2"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 776
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   776
Md5:    0a512e142fca20d36f8ed61cc15d5ec2
Sha1:   46bdb012729550842552d4582844f1d2595db3c6
Sha256: e97c37484ec407fcab846aef3348324a5cb07f6c10adae191056cf68d7a68bd9
                                        
                                            GET /landings/274823/1659024719/images/x1.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: 4dC9Whsb7Eim5i5EBM6UjpccTVGCKuGW+SwrauoZXaeUk3vDb5bLStapH+Dg9HQ+fUo1z+LLviE=
x-amz-request-id: WA5N0QBZKSHQS0K4
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "ee850988ed56cd6f2498cae7993a8753"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 593
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 258 x 184, 8-bit colormap, non-interlaced\012- data
Size:   593
Md5:    ee850988ed56cd6f2498cae7993a8753
Sha1:   965f9091ca3e7f21f5b8115347227aedc93c586e
Sha256: 0303153a716bc5000d737521c0f6eb517700a1856b8e22ba8c088ec8f06ed8ba
                                        
                                            GET /landings/274823/1659024719/images/top_red.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: uiAb/EyjtbZNUYlDpob39AZGlWe+k4D/TJM/vBaOSM4z7rkgX83W24a477VuBYRIaY/qH7/BZvQ=
x-amz-request-id: WA5VRN1X05DBX5TD
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "7c3054c986ecb28527c05aec01fe0b14"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 21242
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 258 x 184, 8-bit/color RGBA, interlaced\012- data
Size:   21242
Md5:    7c3054c986ecb28527c05aec01fe0b14
Sha1:   ce574b0e783c7887ee08599e7cbd511649cf0714
Sha256: fea757e6088195cdcef65d4bc5b07d204b89ccf0bb2c25a39a0160350d1e14f6
                                        
                                            GET /landings/274823/1659024719/images/box_open.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: shTfc7moRqa/MBeOqGJROK7VZDCiU7+MrB3mvSloF5CCpOmvHg2R2NVkJMgDLSWPYCagDqQ4oFQ=
x-amz-request-id: WA5X6GJTM3CX83MK
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "1ffa36d857f91410fec0f79afd4dd90b"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 12208
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 258 x 185, 8-bit/color RGBA, interlaced\012- data
Size:   12208
Md5:    1ffa36d857f91410fec0f79afd4dd90b
Sha1:   2cf335e8c7657cb75205ecc65564ae8f1833dfd0
Sha256: b1deea456d7a3a27b1369c198970d8d6ad5a76f71767f37dccd599e1c6b69aed
                                        
                                            GET /landings/274823/1659024719/images/fr3.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: gq7KdPXGjA4kil5VBf1Vg8Q6E/QrzOMidccftjk28rPiPYQshN4FH2lvWCrUbFcxDmB+qH73O3I=
x-amz-request-id: WA5NP26CQ298NQ8F
Last-Modified: Fri, 29 Jul 2022 07:20:19 GMT
ETag: "c74a5befd416e24626972e88ed65526d"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 3601
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size:   3601
Md5:    c74a5befd416e24626972e88ed65526d
Sha1:   4e8c25553248600cf23c3d6bcec488d986a129f8
Sha256: 53bb570f4465306a78670ecbea911ba0362251d2dc825d9ea0cb5d1c70f413ac
                                        
                                            GET /landings/274823/1659024719/images/fr2.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: +ESVx9m1QvxLmLRDkQnaltUFYAJfTgcoc2hknPpEeJ5pwFf/as2PpcUzB17GXTQ+E5qYRKslYeI=
x-amz-request-id: WA5YB0YN3QHYJ6C2
Last-Modified: Fri, 29 Jul 2022 07:20:19 GMT
ETag: "9b63ccbd631923743813e838190cecbf"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2815
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size:   2815
Md5:    9b63ccbd631923743813e838190cecbf
Sha1:   5c6dd930c81346616e9c641ff41b6f18344c7e76
Sha256: 4ca9130a03f6874bab37d2d52fd4546e3de34ccccbd83aa5b9cb6ed0f923d8b3
                                        
                                            GET /landings/274823/1659024719/images/star-empty.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: GlZ9+gCGTnmlwojSd7KMFAlLfgItYZuNE/bV8Lgr215uAUOhHYUfFEU9hXmzVe7xFUU8rODnm9c=
x-amz-request-id: WA5Y6D0231YFNPQM
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "f06f235ca411964c798cb682227e1f77"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 1070
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   1070
Md5:    f06f235ca411964c798cb682227e1f77
Sha1:   6efc81b9b313c9ef984b93e12302bc198e76709d
Sha256: 51a9e59023f8c1235483a48893310b06a2ec04852853fdaccd0fb2d770a5462f
                                        
                                            GET /landings/274823/1659024719/images/fr1.jpg HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
x-amz-id-2: bFhpxGczDjDG5/VIccxiiP7IUi5rAFVnyzMw0opcCOiKPGE8a4G6ZCG4Ow89SzCyYmdx6d5dx+g=
x-amz-request-id: WA5MMHCQZWM4326N
Last-Modified: Fri, 29 Jul 2022 07:20:19 GMT
ETag: "4c88ebf87b0cc26121497de03db7f64a"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 2939
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Size:   2939
Md5:    4c88ebf87b0cc26121497de03db7f64a
Sha1:   a1256a5cfcd62223172eb3633659caddff6cf005
Sha256: 28db5edb0fe5e61f42eb8a0d10250a317f3ac840e074ffa761cb953c330f2cf6
                                        
                                            GET /landings/274823/1659024719/images/box_closed.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: SWtOhWHrW/IvloijRpVxCC2yrChA6VXvB2j+Rr2UbThiJdmMUqttpaOLiOnl7vwUUBeW4OCgjIP3gMPh3Jw2ng==
x-amz-request-id: WA5JXX848W3XKR7M
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "343267fae950c08eb27cea050a2cea74"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 25935
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 258 x 184, 8-bit/color RGBA, interlaced\012- data
Size:   25935
Md5:    343267fae950c08eb27cea050a2cea74
Sha1:   facfa06a02ff85ae15a6263cd03ddd9d0219f11c
Sha256: 6f58197400ced3b47b57f4596680ecf56114dd8797a56a618481ea1f297eef20
                                        
                                            GET /landings/274823/1659024719/images/alert.mp4 HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 206 Partial Content
Content-Type: video/mp4
                                        
x-amz-id-2: MlkYJLDwe8uiJFl8fwXpW15czwYVeAPIaMl06DRrv6UomWUpsC1NVj9lHpg+2UqcKavxWkQKZAE=
x-amz-request-id: WA5WWWBDAKEW91XX
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "7108923ba740639a65b12e9d5490492c"
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 02 Oct 2022 22:16:53 GMT
Content-Range: bytes 0-8596/8597
Content-Length: 8597
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  ISO Media, MP4 v2 [ISO 14496-14]\012- data
Size:   8597
Md5:    7108923ba740639a65b12e9d5490492c
Sha1:   e28584565d4352406b836103f9551c86b54ec9d4
Sha256: 19c43187dbcb6082fd665d77cf06e46b3daf6805212b8485d1fd8ed205066645
                                        
                                            GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1 
Host: maklj.unantlcipatedlucks.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/c/1f0a2cb367c37dee?s1=21635&s2=1308821&s3=106&s5=backuser&click_id=b7bef1111cfdb4e264cd535edbdd555ff96006011b17edf944af7a260d573bc2&iexpp=1&j1=1&j3=1
Cookie: unique_id=633a0dd4000c3c00; unique_id2=6339f081000a465c; 6339f081000a465c_c=1; ref_token=21635; 6339f081000a465c_sl=[274823]

                                         
                                         52.19.101.114
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 22:16:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 09 Oct 2022 22:16:53 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (9389)
Size:   3297
Md5:    3fc959642390ff4dc8b17be4e706c3fc
Sha1:   107f4500b048c2060c53260ef3c5a0c2286499a8
Sha256: 740aacdd2752459683dc7986658f1ac667048404bc12ce6dd233813d68aa4131

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /images/favicon.ico HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
x-amz-id-2: 3PLd1JbxzMUZnvLfJ08LlqJVa0X1bm3g8lDKKuDaPcpHRGpUOyvL763tb+Zgy/zeSb8kMvb/P10=
x-amz-request-id: 2XWP9N688THY1C8H
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 4103
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   4103
Md5:    4cdf3256cd7b8ec3917adb79d6bf457e
Sha1:   bc615337e9223183a126c8fb649774866fb53e69
Sha256: fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
                                        
                                            GET /js/pushjs/1.0.0/utils.js HTTP/1.1 
Host: maklj.unantlcipatedlucks.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/c/1f0a2cb367c37dee?s1=21635&s2=1308821&s3=106&s5=backuser&click_id=b7bef1111cfdb4e264cd535edbdd555ff96006011b17edf944af7a260d573bc2&iexpp=1&j1=1&j3=1
Cookie: unique_id=633a0dd4000c3c00; unique_id2=6339f081000a465c; 6339f081000a465c_c=1; ref_token=21635; 6339f081000a465c_sl=[274823]

                                         
                                         52.19.101.114
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 02 Oct 2022 22:16:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 09 Oct 2022 22:16:53 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (7071), with no line terminators
Size:   3387
Md5:    be3b25b851473bc70a884cb177fd7076
Sha1:   51db0baf5c4fd8a8b09ca7ffde3ffa987635cbd0
Sha256: 1b0a79f9e94716392c53169b6f43442b5228c54c3043be131d72b3bf60ca972a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         13.224.222.70
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Sun, 02 Oct 2022 21:32:53 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 02 Oct 2022 21:45:39 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 afc3b8b9cbf7cef6657816067537f46c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR61-C2
X-Amz-Cf-Id: SCkpRT4dOQi14lKJLC4fAxOlFe6FZ6tDBFdzwo_P_elcG1x6SKGhKA==
Age: 2640


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 22:16:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 22:16:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /firebasejs/5.0.2/firebase-app.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 8604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 20:25:09 GMT
expires: Sat, 30 Sep 2023 20:25:09 GMT
cache-control: public, max-age=31536000
age: 179504
last-modified: Thu, 10 May 2018 20:35:51 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (25088)
Size:   8604
Md5:    73069e532b7039778d3a7128c997c61a
Sha1:   c523bbf1ac7f4e612c8ade75434c42fbca885adc
Sha256: b6d7aec09aad2bb78dfbad4c9530fd03c0f33aed8385c3ee57c10b1fe959c4d5
                                        
                                            GET /landings/274823/1659024719/images/amazon.png HTTP/1.1 
Host: cdn-dimi.akamaized.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://maklj.unantlcipatedlucks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         184.31.15.107
HTTP/1.1 200 OK
Content-Type: image/png
                                        
x-amz-id-2: ndGLO0o+tQr74BUA6nDUDJ91+zdh/ZXE0zojwl8rQwLZDxuHL9NXcCSRMlLziDi+8+MU1mxXk3w=
x-amz-request-id: WA5VFFNJ3HHVNQVP
Last-Modified: Fri, 29 Jul 2022 07:20:20 GMT
ETag: "6adf73886022c146f1dfc9be1259f7fc"
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 159664
Date: Sun, 02 Oct 2022 22:16:53 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   10017
Md5:    fa9987a23f5a9d865766e952511baa30
Sha1:   f2e620b99ee61a01671ba6a9e22ca75d58a1b52d
Sha256: 655daa1e20bf3aff16bc8462339dfea48c7ea5d3dd3505937015af3586d15fb7

Alerts:
  File Analyzers:
    - virustotal: 0/0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5837
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 22:16:53 GMT
Last-Modified: Sun, 02 Oct 2022 20:39:36 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 02 Oct 2022 22:16:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: alBSfj7I8NxmhoOQMzJtqg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.80.175.197
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zrPOIbEKm+kFhGWFeNs6MvfQqLY=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5020
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 22:16:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5020
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 22:16:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5020
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 22:16:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5020
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 22:16:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5020
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 22:16:55 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:00 GMT
age: 63355
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F943d6a55-696e-4fd8-901a-a9ab097959d7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6321
x-amzn-requestid: 605adeca-4345-4481-999e-d50ebc123767
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWabGsgIAMFcSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a0442-68542d1b56697ab33dd63941;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: xZUu90wyCNVEexHxRRNQz0aDhNy_u0WC2v8TVxHkQvW-evaDwfKTtQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:45:27 GMT
etag: "89ce0e6d742144439a96ace034adae4e7e167311"
age: 1888
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6321
Md5:    8bb7613964aef696917cb85a6d0bcac4
Sha1:   89ce0e6d742144439a96ace034adae4e7e167311
Sha256: 24b100b10aa041effad83e9379447f4f62d95dcf6eb27a6b093a7caaa484f964
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8158
x-amzn-requestid: 424c8c6c-7075-4ace-97e6-2b0a609d1b7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXDxGRlIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-046d963a345c15e81dc74e4d;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: AM8Ox9ObWGoXI-QnnoI7QkY5mOh8j6xBPetTrhyVktVO40ekk4X2Eg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:45:27 GMT
age: 1888
etag: "3fc3aeae907a0ce0db21753c67c1000681e48b8e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8158
Md5:    721a8d8f94c3796abf021978fcdbc831
Sha1:   3fc3aeae907a0ce0db21753c67c1000681e48b8e
Sha256: cb497b15e7c2e49930b99f8d6659f0394acefb7b11613ca04397ee782dac759d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9083
x-amzn-requestid: fda71fd3-ef25-4a63-94ae-1bfc8aef8d14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXD2H0DIAMFjrg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-198915fc17ce3dab571b7575;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _JxPe8uPQIgRKoJxtJAKjXpVy1hCW0rFcs8K_erJOHbVNpw339Pz6w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:45:27 GMT
age: 1888
etag: "8118ee462077c291b9d6f1402b85b55a9ceba8c2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9083
Md5:    523edd86af4757d0bc5fa5b3b8a3596a
Sha1:   8118ee462077c291b9d6f1402b85b55a9ceba8c2
Sha256: c27de9970317636df8c4a517a9ed38e573235b351bf92c9b8bb1f964cd100031
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb7e3592-97bd-498d-bf7f-2c5bb0fc867b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6983
x-amzn-requestid: e551848c-073a-4317-8841-1fc5fd8a38c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWb3EGdoAMFY4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a044b-6c6a638527bb19f621cd40b1;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dovur2A7-Vx80FdqmWlJZDBBKnAqX0t9FYOIaqikEumI9bebg171KQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:45:27 GMT
etag: "2d543d6b1bed9901437c3b880bd415ece354cbf7"
age: 1888
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6983
Md5:    91079e915678800d2e2e1f68415d5dc4
Sha1:   2d543d6b1bed9901437c3b880bd415ece354cbf7
Sha256: b9bda55eef23a199fff3bd3fde22486ef4d50edd36b105b0ee13479b96c2ba22
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faca14744-6a37-4b92-bc31-53527a78d6be.avif HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 400 Bad Request
content-type: application/json
                                        
server: nginx
date: Sun, 02 Oct 2022 22:16:55 GMT
content-length: 3
x-amzn-requestid: e40ec89f-b676-4647-8794-551615cb8dec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZcCsH_ToAMFyzg=
cache-control: max-age=120,public
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a0d44-4ced517b762b63da356c5458;Sampled=0
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Error from cloudfront
x-amz-cf-id: X6xOUx9rgC__HtRNVvE8oikhsb_JDcgBN5u_3L111rOdy6KirNC7Hw==
age: 86
via: 1.1 2a44ef7b9d28e74c78ffadeedcbb887c.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   3
Md5:    fcc3d7489d15ef49dbbf735234234cf7
Sha1:   654e0aaee80e38636c503629d32225db31a616de
Sha256: 52109349dabf69106e04ec2f493fb8b6ade94ea100227cccce6559ab8b96553f
                                        
                                            GET /direct?url=https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faca14744-6a37-4b92-bc31-53527a78d6be.avif&resize=w450 HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: application/x-empty; charset=binary
                                        
server: nginx
content-length: 1
x-amzn-requestid: e07bcab1-4238-4f19-bd9f-5c13df7d377f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWamH3tIAMFzbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a0443-074d95046d062c2475ab5efb;Sampled=0
x-amzn-remapped-date:
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5YU9gPtzbBt1JHoOo05mPgE4n4VPzMcFzGczDf49M3vsULsxlD_4oQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:42:47 GMT
age: 2048
etag:
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    7215ee9c7d9dc229d2921a40e899ec5f
Sha1:   b858cb282617fb0956d960215c8e84d1ccf909c6
Sha256: 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068