Overview

URL www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a
IP54.230.111.16
ASNAMAZON-02
Location United States
Report completed2022-11-24 20:17:44 UTC
StatusLoading report..
urlquery Alerts Scam / Brand infringement


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/like_user_2.jpeg Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/like_user_1.jpeg Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/main_script.js Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/1.jpeg Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/2.jpeg Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/7.jpeg Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/8.jpeg Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/3.jpeg Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/4.jpeg Phishing
2022-11-24 2 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/6.jpeg Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (9)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS r3.o.lencr.org (5) 344 No data No data 23.36.77.32
mnemonic passive DNS ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-24 05:36:55 UTC 34.102.187.140
mnemonic passive DNS www.luckyducky.pics (24) 0 2022-10-29 04:17:56 UTC 2022-11-24 16:19:36 UTC 54.230.111.13 Unknown ranking
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-24 05:30:55 UTC 34.117.237.239
mnemonic passive DNS hop.greenbluefrog.click (1) 0 2022-08-29 09:19:28 UTC 2022-11-24 05:55:25 UTC 108.178.23.115 Unknown ranking
mnemonic passive DNS push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.38.146.2
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 54.230.111.16

Date UQ / IDS / BL URL IP
2022-11-29 08:12:57 +0000
1 - 0 - 11 www.luckyducky.pics/sweeps/MZ/iPhone14-PT-Spi (...) 54.230.111.16
2022-11-29 02:57:29 +0000
0 - 0 - 1 www.iolostore.com/packages/SystemMechanicStd_ (...) 54.230.111.16
2022-11-29 00:12:08 +0000
0 - 0 - 10 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spi (...) 54.230.111.16
2022-11-24 20:17:44 +0000
10 - 0 - 10 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spi (...) 54.230.111.16
2022-11-24 12:16:56 +0000
10 - 0 - 10 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spi (...) 54.230.111.16

Last 5 reports on ASN: AMAZON-02

Date UQ / IDS / BL URL IP
2022-11-29 08:43:03 +0000
0 - 0 - 3 240c.com/ 76.223.35.103
2022-11-29 08:42:59 +0000
0 - 0 - 21 equitypower.in/ 15.197.142.173
2022-11-29 08:41:33 +0000
0 - 0 - 1 simpletravel.net/ 44.230.85.241
2022-11-29 08:41:41 +0000
0 - 0 - 1 aubreyscloset.net/ 3.33.152.147
2022-11-29 08:41:23 +0000
0 - 0 - 1 umaidry.us/ 75.2.18.233

Last 5 reports on domain: luckyducky.pics

Date UQ / IDS / BL URL IP
2022-11-29 08:12:57 +0000
1 - 0 - 11 www.luckyducky.pics/sweeps/MZ/iPhone14-PT-Spi (...) 54.230.111.16
2022-11-29 00:12:08 +0000
0 - 0 - 10 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spi (...) 54.230.111.16
2022-11-24 20:18:00 +0000
10 - 0 - 10 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spi (...) 54.230.111.80
2022-11-24 20:17:44 +0000
10 - 0 - 10 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spi (...) 54.230.111.16
2022-11-24 12:16:56 +0000
10 - 0 - 10 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spi (...) 54.230.111.16

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-29 07:57:03 +0000
0 - 0 - 1 49.winprizes249.monster/es4/coppn2.html 217.69.14.8
2022-11-29 06:39:20 +0000
0 - 0 - 10 www.big-winners.click/push/winner/index.html? (...) 54.230.111.97
2022-11-29 00:12:08 +0000
0 - 0 - 10 www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spi (...) 54.230.111.16
2022-11-28 15:43:18 +0000
0 - 0 - 2 track.writive-resica.com/440b3355-b433-4f4f-a (...) 18.195.128.171
2022-11-28 03:39:04 +0000
0 - 0 - 11 phythmspeters.com/fed87f8a-1fca-4dc8-8bbf-3b4 (...) 18.156.16.63


JavaScript

Executed Scripts (14)


Executed Evals (0)


Executed Writes (6)

#1 JavaScript::Write (size: 17, repeated: 1) - SHA256: 8959981935fc7a8c28d2846bf7a198eebd07712bcb75690f4ca877e6e073811a

                                        22 novembro, 2022
                                    

#2 JavaScript::Write (size: 17, repeated: 1) - SHA256: 200f0796ac8d4d8aeef01ee51507a85fb7c9ec0c201395908acddd609b778335

                                        21 novembro, 2022
                                    

#3 JavaScript::Write (size: 17, repeated: 1) - SHA256: 5f585458a7eb87ff28a14a02c725b429284988b7534ccddb7b91cf77e54f4623

                                        20 novembro, 2022
                                    

#4 JavaScript::Write (size: 31, repeated: 1) - SHA256: edab6cf24ec7de8dcfc12883b69ead4617a5a4c8c63f37a91e356f51a2cd0cd8

                                        Quinta - feira, 24 novembro, 2022
                                    

#5 JavaScript::Write (size: 17, repeated: 1) - SHA256: 25523c09084cb8e6fc2d57288cf7e2bf0dd01d336e712dc619ed6b9b87d6a9c8

                                        as quintas - feiras
                                    

#6 JavaScript::Write (size: 0, repeated: 1) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    


HTTP Transactions (43)


Request Response
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 24 Nov 2022 08:29:22 GMT
Last-Modified: Sat, 19 Nov 2022 16:39:07 GMT
ETag: W/"c714b6655bbe62daade2d3be70084da4"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8pYEnTGFkUWPfHtaA7xW6DWIRUklm9mIHbfVpm8HxYl6-n7nzv_oCg==
Age: 42492


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (329)
Size:   3879
Md5:    c805e3d00f73f59ff9841fc2ee9e0f6e
Sha1:   51ff5316192296b020776dedbc90e72f301e70f5
Sha256: 3fbfff10b91192e6f4d18881ac435f0a9e39db88ddd8cf1584146724e80ede77
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2817
Expires: Thu, 24 Nov 2022 21:04:30 GMT
Date: Thu, 24 Nov 2022 20:17:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6294
Cache-Control: 'max-age=158059'
Date: Thu, 24 Nov 2022 20:17:33 GMT
Last-Modified: Thu, 24 Nov 2022 18:32:39 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 19:18:59 GMT
cache-control: public,max-age=3600
age: 3514
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4684
Expires: Thu, 24 Nov 2022 21:35:37 GMT
Date: Thu, 24 Nov 2022 20:17:33 GMT
Connection: keep-alive

                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/style.css HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 24 Nov 2022 08:29:23 GMT
Last-Modified: Sat, 19 Nov 2022 16:39:21 GMT
ETag: W/"8c24a5cb4c55b9d6cd3029f5fd2c6fe7"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6pIzT1tfazr9hIJRcKSqy4kdcXV3_OvssydwhBDrZ0ytk_uliz6www==
Age: 42491


--- Additional Info ---
Magic:  ASCII text
Size:   3223
Md5:    8b4d27df689a9f0aac0f990a5d7118d5
Sha1:   21e34f694d2fc9d9e4bd5ccdb429870b35fcf5f0
Sha256: c92a5405d7a8bc4956b32b82072975517a82498eb571a5d29d3557ee17d1a6a4
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: N1zfAkIMDQ6AN0prB9uJvtkO2J3gsyQmgwsEC1V6HeGRSl2xVK3j8Kvsmkqjgh/X9TfM6ktQsn4=
x-amz-request-id: 9FMGQP5R1SDCSMS0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 19:40:31 GMT
age: 2222
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/ixo.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 13400
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:10 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:55 GMT
ETag: "125914bcab1f703d2a2e2de49e0fde1e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NPRPv94i6PEu3KxjMFOJtcx5hZgOye5WDacgfnrb7nbnJFNM9tLAyQ==
Age: 52299


--- Additional Info ---
Magic:  PNG image data, 165 x 331, 8-bit colormap, non-interlaced\012- data
Size:   13400
Md5:    125914bcab1f703d2a2e2de49e0fde1e
Sha1:   d35b3b048137bdcbc695501533a8768bda4f4776
Sha256: 99735d4ae8da195bf366a6e23a7c691ef5a79ac25f3914856281383959a699d7

Alerts:
  urlquery:
    - Scam / Brand infringement
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/pw_ix.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 86455
Connection: keep-alive
Date: Thu, 24 Nov 2022 08:29:23 GMT
Last-Modified: Sat, 19 Nov 2022 16:39:18 GMT
ETag: "118bf8883923de6a916087ffbbb7283c"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bGU8D_M9wb7013N3o3dr3Xa0ar5p8lvBl9M_ok8X0LfJDo1trjW2Tg==
Age: 42490


--- Additional Info ---
Magic:  PNG image data, 501 x 501, 8-bit/color RGBA, non-interlaced\012- data
Size:   86455
Md5:    118bf8883923de6a916087ffbbb7283c
Sha1:   506810fb5f8e562ed0b21874c1aa2eddb932813a
Sha256: d19c709b63fd66d5fcecbfe7eebbff5b54b35d7d025482db6dae7d36fb6e57fb
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/ix-s.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 49481
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:09 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "ad001dc709b9157087aca5c625eeb2ce"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tMErbuNUXiVTYXq2Au41RnEcFiA1qQRU_rnraX3eO8op8i-A9oAuOQ==
Age: 52298


--- Additional Info ---
Magic:  PNG image data, 150 x 236, 8-bit/color RGBA, non-interlaced\012- data
Size:   49481
Md5:    ad001dc709b9157087aca5c625eeb2ce
Sha1:   152a7d2adb91c6a3ff56e8aad051ebe0b6e5f64d
Sha256: 4c8c40e83d49b0c0d106730661f07688e7cb9a1ab4f8c0e82dade23c292d9a76
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/ix-g.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 45819
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:08 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "e9e9eabd23b0d1a50684dbf423150db2"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Xad3FarLuaeZFMXmzHDsbFYcmW7sw0pvPl6IiL6n2EbZkYh2UeyQLA==
Age: 52298


--- Additional Info ---
Magic:  PNG image data, 150 x 236, 8-bit/color RGBA, non-interlaced\012- data
Size:   45819
Md5:    e9e9eabd23b0d1a50684dbf423150db2
Sha1:   2ad653b70ecb4da11284d34a19d31fb5c0d601de
Sha256: 6dfef9d6d6b668e5d8f7750e61a2b9ef00458d4a8cb887735a427dde2c6a9304
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/like_user_2.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1216
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:12 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "f9299c2023539a8f27a6e1b12ed260e5"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -Hbabce_17pQ4aWhOteCuhZQbAB_12KuD0dC6DmozE67LEPOyIgVBg==
Age: 52298


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1216
Md5:    f9299c2023539a8f27a6e1b12ed260e5
Sha1:   046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2
Sha256: ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd

Alerts:
  urlquery:
    - Scam / Brand infringement
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/like_user_1.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1293
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:11 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "2aa0d43e70d60d76ac4bdff139f8c7cb"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DnVNiWzwCfDalNUb8q0D8mQP7DDcfPAAV1QSvcd0FKeAi8_0QfeF4w==
Age: 52298


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1293
Md5:    2aa0d43e70d60d76ac4bdff139f8c7cb
Sha1:   d7e3433297ad90f5d99249aee29b645265c9f3eb
Sha256: e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa

Alerts:
  urlquery:
    - Scam / Brand infringement
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/main_script.js HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 24 Nov 2022 08:29:23 GMT
Last-Modified: Sat, 19 Nov 2022 16:39:14 GMT
ETag: W/"b62245b20c8531f87c53c4e1e6d6801b"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EbkELloiCT7_7mVdvzTL_XSDxaQHC2ka00RSExNdk70s5inLuXZOKA==
Age: 42491


--- Additional Info ---
Magic:  CSV text\012- , Unicode text, UTF-8 text
Size:   1073
Md5:    45843f810d58ec69016b81355df0790d
Sha1:   06abc8977168d9146d20e7647fad92198804c1d4
Sha256: 53470fa6adc77caa6e74d36a2576264bbefbbad4afdd1b4be8b137dcfcbdc3ba

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/1.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 2561
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:48 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "cc828ee97beb67097fc7ab536c4af12c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UDkY_-evUjGQNQWc3fsVDpRW1x3hrBlU8EIptZAPbcgr-Quw9bB-qg==
Age: 52298


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 50x50, components 3\012- data
Size:   2561
Md5:    cc828ee97beb67097fc7ab536c4af12c
Sha1:   84fea9004c5e5ac398956b2839fc4cd16d6a93ee
Sha256: a00457ad70d21f9a9e8ab218b4b2174a3fe7ec928f3bcc9e44f994fa382d7d94

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/2.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1745
Connection: keep-alive
Date: Thu, 24 Nov 2022 08:29:23 GMT
Last-Modified: Sat, 19 Nov 2022 16:39:49 GMT
ETag: "2b0414dbc0cca6ac9324eb8159658a5c"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gS4rpIv6tJPC9pBGSZN8dITnqYC8ZBH2Q0Yr5-2YLtcRIM7HpC18eA==
Age: 42491


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1745
Md5:    2b0414dbc0cca6ac9324eb8159658a5c
Sha1:   6f22ec6dbcf4cad9b6fc0783ddb1bb3890e36ce7
Sha256: 610ecdd6f466381bb45a5ad592fb118bd30b2fb173dab7aa55b61b45e25eeca3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/7.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 4333
Connection: keep-alive
Date: Thu, 24 Nov 2022 08:29:23 GMT
Last-Modified: Sat, 19 Nov 2022 16:38:57 GMT
ETag: "b067b7287cb30c70952a17bb2c7b2ba8"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CMp9YeTL53ucQtrfDlD9bcMnLNXQvH9ao-NdqaH4MYjgQPDLcuQ9VA==
Age: 42490


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   4333
Md5:    b067b7287cb30c70952a17bb2c7b2ba8
Sha1:   86208b6a77c998a3121de739716bf30d108d4768
Sha256: b6c91b9d5eacc1dcc9c4331d865a7f26474a96a18a1d4d80aee0bbdeb7ffb775

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/8.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 6097
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:38:58 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "4c3de954b1a95aad7726248624aad1f3"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ETxbFns5n32bpst20aCXRCMgZhzU2ZunHG7yK3fpuT3cf7dJ0Uc_yg==
Age: 52298


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   6097
Md5:    4c3de954b1a95aad7726248624aad1f3
Sha1:   7022b5b701205dd9a5c0f2b68efa63fd519432a5
Sha256: cab3a2c8b31da648fbf2594c99f9c33e77b15f1f868e778c31063fc501474dff

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/clip_footer_3.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 2460
Connection: keep-alive
Date: Thu, 24 Nov 2022 08:29:23 GMT
Last-Modified: Sat, 19 Nov 2022 16:39:00 GMT
ETag: "e1b626392882cc25b4d891afaa68afd4"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NWwnDE8zW5L0vYskinkKQ1gtI3wpbM9Y_nPZlCl7BW8uG4DQ-VEAsA==
Age: 42490


--- Additional Info ---
Magic:  PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data
Size:   2460
Md5:    e1b626392882cc25b4d891afaa68afd4
Sha1:   454d7abdbc2548d04feb95436ea0ab4126b4f00b
Sha256: ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f

Alerts:
  urlquery:
    - Scam / Brand infringement
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/footer_right.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 4919
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:03 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "0e786b7344ac0b63609290a3a415fc4f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9keLxmlkm9M4RpyDpSJm3hCJF1vZ7TalNeu_z2iNUlj0ir5NTZdvKQ==
Age: 52298


--- Additional Info ---
Magic:  PNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data
Size:   4919
Md5:    0e786b7344ac0b63609290a3a415fc4f
Sha1:   c2e77827e895aaa13522f1c5c0ef79d4caef0bb2
Sha256: f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5

Alerts:
  urlquery:
    - Scam / Brand infringement
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/3.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 2321
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:51 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "31281fc0cf3a7e9de2138b3c9163c027"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: a2Ig92SFeNy_kB7xpEEejVhMNQrXnBDp42kCQlrILtThdoXT0k-DiQ==
Age: 52298


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   2321
Md5:    31281fc0cf3a7e9de2138b3c9163c027
Sha1:   7d37405c4ed8892e6d0bb4d045efa5e07d58e7fe
Sha256: c9f9aadb43805f4d02f284888f44b8491fc88df851ab099665cdb2f42fb88cfc

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/4.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 4515
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:53 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "ce65860a3580eeb0663aeef0879d9b45"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wyMDoZATuHA7Cdqbxk-CAWsTjfRNzD89RbDiQT1eB_IuTi8EGiPigg==
Age: 52298


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   4515
Md5:    ce65860a3580eeb0663aeef0879d9b45
Sha1:   de58e30241ef04769d91e23462eb0b7660fc4888
Sha256: 7a9408bac7aff3dbb3053960f1fda2cd13b39c965105c33556897c5c01e94468

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/6.jpeg HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 1879
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:54 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "8e85f8746bcf3341641794ba5c4eedfd"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OZkz0_BItL9NK_v6GNoqaiGknPhDE4p0RF5tImdGU4BM6aP-KxXqzw==
Age: 52298


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1879
Md5:    8e85f8746bcf3341641794ba5c4eedfd
Sha1:   2f828f519827be0b423fcad33ae3fa422122a059
Sha256: d7d0c84fa55764ceecf9fad00db78ca5924f76e5b677d4e9421f35fa73cc6ea5

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 24 Nov 2022 20:17:33 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/menu_2x.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/style.css

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 124
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:16 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "8f68efd9388ccd80b43759b2ed542305"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qrITxr4-4y698UHdjiKuiQeLC_MVcgJCzFutnCRScL_YDW-_FGtQoA==
Age: 52299


--- Additional Info ---
Magic:  PNG image data, 40 x 36, 8-bit gray+alpha, non-interlaced\012- data
Size:   124
Md5:    8f68efd9388ccd80b43759b2ed542305
Sha1:   9f2cf96efe3bdec2ab64bc51856619cc02958fe6
Sha256: 455b82fa1e54fc88fe0699eabecb02155f1d6228e0ae3d7f72e1abe92dae8f3c

Alerts:
  urlquery:
    - Scam / Brand infringement
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/notify_2x.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/style.css

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 229
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:17 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "988234626ae7a880ed9c6a92f6336c0f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9wcZHexX5hK3BNqN8Q4UKf78Has2v7RiXN8PWmkVoLWcZRLLmPuKiA==
Age: 52299


--- Additional Info ---
Magic:  PNG image data, 36 x 32, 8-bit gray+alpha, non-interlaced\012- data
Size:   229
Md5:    988234626ae7a880ed9c6a92f6336c0f
Sha1:   173967c2b59baed4a06997d874aba32ab65da201
Sha256: 4566dd8f59a09f51415a7c8955f48f75298522fc6db554bc1a59ad79c3e3e314

Alerts:
  urlquery:
    - Scam / Brand infringement
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/spin_prize2.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/style.css

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 2814
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:20 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "f278c8d30fc51b72e0774b9ecb49214c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9lmOCHB0Uh2SSbrIsdS6Uko6pK3GToeHCaedB97NhWx0pf1dZPbhjg==
Age: 52299


--- Additional Info ---
Magic:  PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data
Size:   2814
Md5:    f278c8d30fc51b72e0774b9ecb49214c
Sha1:   03b574db82b31ee5758eb5093fda8ea25d1b00d8
Sha256: 43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c

Alerts:
  urlquery:
    - Scam / Brand infringement
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/comment_action_2x.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/style.css

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 641
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:39:01 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "e9b3872b3e63e19728176d45f0aa6986"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RVkXeD3MhBrGeEs40trIIpv-cr8FldeXrpcqIbnV-_SfKLg6D5_Zgw==
Age: 52299


--- Additional Info ---
Magic:  PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data
Size:   641
Md5:    e9b3872b3e63e19728176d45f0aa6986
Sha1:   b638f89d5d80c4cd65327da973c52f778e30bd55
Sha256: a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5

Alerts:
  urlquery:
    - Scam / Brand infringement
                                        
                                            GET /sweeps/MZ/IphoneXS-PT-Spinner/action_icons_20px_2x.png HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/style.css

                                         
                                         54.230.111.13
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 1726
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 16:38:59 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 24 Nov 2022 05:45:56 GMT
ETag: "b699975b5fe73b087e711a33ff24ee1e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RW_WicyvGJooLSpRCM01jHAtTy6ESlvz2sxDpRTQp5jbaGgFnDUhng==
Age: 52299


--- Additional Info ---
Magic:  PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Size:   1726
Md5:    b699975b5fe73b087e711a33ff24ee1e
Sha1:   0e33cc5c32a5e7d18440751e3946076664caaf53
Sha256: 4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
                                        
                                            GET /js/pub.min.js HTTP/1.1 
Host: hop.greenbluefrog.click
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/

                                         
                                         108.178.23.115
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 24 Nov 2022 20:17:34 GMT
Content-Length: 1482
Last-Modified: Fri, 09 Sep 2022 11:46:08 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "631b2780-5ca"
Content-Encoding: gzip
Expires: Fri, 25 Nov 2022 20:17:34 GMT
Cache-Control: max-age=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (2752)
Size:   1482
Md5:    31c303586c1b78e33984bd252b8e2644
Sha1:   8083e2aad4cbf8242a4e6fb53657d49552b85f82
Sha256: d2c713c2734353dc0ef2896d057021e9b04f35bb7c851d920d390941769c66be
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.luckyducky.pics
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.luckyducky.pics/sweeps/MZ/IphoneXS-PT-Spinner/index.html?cep=dDgdcd_JlaxuJxEM5l8AxCd6Soj3SwPO53EdIqpILaEOwF1ZmScYjOItGdWoSiBnpCJMokKwlZtErnjMLT6smmLc0hBDgdbeitHlGlyBXVe6JGqSxSfd6awi0Cl2JbhsdlfaqL6Bao5YW2n9VnC2j6Cd257Z8WQdK5bZTrFFbIbwRzJPEth4T3Zll5_SlbvRtnEyxGa9Qr2F2t2US50tZvrJO_z12inznXUkly5h2wBnz_bR6WuRhvAG6FKPwr0ZizurLShn8im1Dc70P9vaQbJFmAqNdBFmqn7ZHPCtfL2Ge7MiNqPGk46TRBgXeDXn2hhGVIZn0Bx_tM9PNaDHGrAObQxSJNXWC_wWCKtAfk3dHamJqmXBw9dVrkmtwPv9TxVLeGTs3NMk8TfgcALmwhwRHEapmlnGXPRUQ37hBEw&lptoken=16e3692a32e828fb433a

                                         
                                         54.230.111.13
HTTP/1.1 403 Forbidden
Content-Type: application/xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Date: Thu, 24 Nov 2022 20:17:34 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8UmMVv-W433pO-ggOw7Sk87L1RsXwapx15LkhKdIdws3qpUhIaOuCQ==


--- Additional Info ---
Magic:  XML 1.0 document text\012- XML document, ASCII text
Size:   243
Md5:    e985eaa7b6a7e2b4c0db768cc861455c
Sha1:   a1bc7404944601f656fd1d96fb453af20a21fb2c
Sha256: df3f92dc11f8a461498e10abd3e19b41a3862ef4904b59b9744ab1e775f06f42
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 20:08:53 GMT
cache-control: public,max-age=3600
age: 521
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5515
Cache-Control: max-age=138070
Date: Thu, 24 Nov 2022 20:17:34 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:38:44 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3QT019unBbw6M/M2u3F4Tg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.38.146.2
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TweF6VR/HiA8yKl8bNzQlrPrQAU=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8568
Expires: Thu, 24 Nov 2022 22:40:24 GMT
Date: Thu, 24 Nov 2022 20:17:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8568
Expires: Thu, 24 Nov 2022 22:40:24 GMT
Date: Thu, 24 Nov 2022 20:17:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8568
Expires: Thu, 24 Nov 2022 22:40:24 GMT
Date: Thu, 24 Nov 2022 20:17:36 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:14:07 GMT
age: 47009
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    841a4b110022a99ddea6f7bf66df0fa1
Sha1:   126771b86638108050cf57c0d12faa27f80f0edb
Sha256: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:06 GMT
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
age: 81030
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7993
Md5:    92c78302bcce1568eb6a5563100b932c
Sha1:   43d1dec7fc06879988c9c3cadd800cc8145df988
Sha256: 0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ve4q5FDkwMGhPK6ZVVVCZtoBTaGaz43r_PwINzwS5Nx5tcZeQkVIfw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:47 GMT
age: 80869
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13882
Md5:    64d79191f005c9876b952c5f948aa0f7
Sha1:   1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
Sha256: 00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:03:54 GMT
age: 80022
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7462
Md5:    b4157f2c5c3c77ce699324ecb08f47c7
Sha1:   a7d9135f9d01ba13c3cdaf8b038c70212f159297
Sha256: 2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8rbsN9OVJmneT9ov-Q7V4RB8DP5UWhhn-7cnukHiBpl06zmMM0zJTg==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:57:20 GMT
age: 80416
etag: "89accd230fba95fe0049678070817b36ead015fa"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5070
Md5:    0856fdb55f19f03a1bec38b3d6e0ac77
Sha1:   89accd230fba95fe0049678070817b36ead015fa
Sha256: 17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:15:22 GMT
age: 46934
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6789
Md5:    d9d93b2a6875d446c3467eb49767eef5
Sha1:   303c571b13b05fcf27ee1159d8fdf6369aaef0a2
Sha256: 2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf