{"report_id":"f0e7a837-70d3-42e5-967d-69f775fc1f05","version":6,"status":"done","tags":[],"date":"2026-02-11T03:35:23Z","url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"172.67.201.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"title":"Yucky Ducks | NFT Community with Giveaways \u0026 Charity","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T18:53:52.295863Z","times_seen":17859444,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"172.67.201.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T03:35:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.wixstatic.com","ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-10","domain_rank":40290,"first_seen":"2013-06-07T16:55:33Z","last_seen":"2026-02-09T01:03:42.584902Z","alert_count":0,"request_count":21,"received_data":42448399,"sent_data":11701,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"t.co","ip":{"addr":"162.159.140.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-04-26","domain_rank":232,"first_seen":"2012-07-25T19:09:44Z","last_seen":"2026-02-04T22:46:03.244786Z","alert_count":0,"request_count":1,"received_data":966,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claim-yuckyducks.com","ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-07","domain_rank":0,"first_seen":"2026-02-11T03:10:49.739569Z","last_seen":"2026-02-11T03:10:49.739569Z","alert_count":15,"request_count":15,"received_data":4837146,"sent_data":7293,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Wix","description":"Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.","website":"https://www.wix.com","common_platform_enumeration":"","icon":"Wix.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-12T18:24:38.07246Z","times_seen":3415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-12T18:24:38.076511Z","times_seen":3284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/plotly-2.24.1.min.js","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5d1d17d3d3ca767b38d547b04558784","sha1":"5a887026b2c63b108b3c69e3168d9000bd842e88","sha256":"04075fa2923df63228edc7a13bb5cc4f329128f3f2bc35f3845eda5fd2930bd7","sha512":"c97ef61061e30ca8f4989a2c2c08cbff10b4768426c36245b4e1bd1ff263447307ac6b103c88df0e78a28da4cba3485919abb43ca588d7935135f9aa4059fff6","ssdeep":"768:GdlsFcK7iLSCddzllm/1Z3IuyyufhMmGPWTp8NUQscQXpcLo7Yck5EqYwmZ97vjh:riCDHyy0Wmn8NUQL1KcjA4S","tlshash":"394374d91516d0da8e9220dee833e509e4a8ee13cd6cf263923cece1751df12859b17b","size":60093,"data":"","first_seen":"2026-02-11T03:10:55.236126Z","last_seen":"2026-02-11T03:35:28.252126Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-12T18:24:38.074126Z","times_seen":3459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-12T18:24:38.075104Z","times_seen":3500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/2aada719-5827-4e8f-b49e-32bdef900e47","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"de26a649b7f7d6849160d8fc1b57fb51","sha1":"5b887d8aef4dfc3446133186b208516c390d83d4","sha256":"740409e4b93f3fe4edf551503e088fe20600047c65d84f4c788b718f38ab7aeb","sha512":"259ec92379ab40545f3bb9a032d341e1eff8dbb2e468ce666bb108f2a8d7b97b5e8ec67164c9a7ccc095dd2e77d1e1a26c50716daea3552305f7b06b78364783","ssdeep":"49152:oG7OwPEZJsZK4zx1wW2QUSvhjG+EyY4bfO3xrQanJfCpszVtost:A","tlshash":"b3f523412c07e9e28f4843aab0f76d0755644e23489db0ded755f9c1386dfa680efa2e","size":3424248,"data":"","first_seen":"2026-02-11T03:10:55.261763Z","last_seen":"2026-02-11T03:35:28.268895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-12T18:24:38.07459Z","times_seen":3246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-12T18:24:38.076997Z","times_seen":3352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"806b551e84a6a036f3c1c9dcd8a3884d","sha1":"097d6d526b188ac6c2a8f6add1361a74f6140266","sha256":"db3b3e7bf474b2ed25a705704f9552114d139096571fe0a2d37961f39d38f186","sha512":"af987b5d2e96329fe4a948b7e8ff25f7c3f9281dc4e253757fb3d1879192300bb54a4f9d0b3dad103b167e3ab23565a409012fb4aaf6d625088c099ad2794cb8","ssdeep":"","tlshash":"0d110e7268581c28c36703097797a41141b9f120d197dcaaf788df8079eed42204b219","size":1000,"data":"","first_seen":"2026-02-11T03:35:28.272367Z","last_seen":"2026-02-11T03:35:28.272367Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static.wixstatic.com/media/56b0d2_7538c5fdd16849d6979ebbcec5b6dae8~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/56b0d2_7538c5fdd16849d6979ebbcec5b6dae8~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 812769\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 04 Feb 2026 21:29:31 GMT\r\nexpires: Wed, 04 Feb 2026 22:29:31 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Wed, 04 Feb 2026 18:06:31 GMT\r\netag: \"01aa206ac8a0d6d5e4c68bf760280659\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7f5c99766c-6f5c5\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: ZB-3wc8MAjYGoxrcP-gKL_L3Uhl1JNfnbMzgu0WsQGJvy9gu2EAa8A==\r\nage: 540326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit/color RGBA, non-interlaced","md5":"f09880dcaafea91dbcbd87b81b4c6f66","sha1":"304ea1b4d58f87d0f11b799e045dc0bc4f0571ae","sha256":"f639c68d68f5876f4207e4ac3221dc3544b91061df59663a914420f20b566e7a","sha512":"59b97754d70d94c072edbd99104c09389da45a8acb03508e565d853a05859c23dbe6f7f8dc24084ea79a549fda55502b59b1058f43066eb891efa6d5c7bc89c8","ssdeep":"12288:AXnaf8D3sNNFVYovSefA4zH2ZagXKS1uHFqdbp5X4/PeXK784P4KmBklt31Nnhj7:yCuOFVYof1+n6podbLXSPyg7P5mGNND/","tlshash":"03f433a4a03d221e390f26a07428057cd59eae7e824cfc5c6dce9df8603bb55df971a1","first_seen":"2026-02-11T03:35:28.203498Z","last_seen":"2026-02-11T03:35:28.203498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":91,"dns":6,"connect":14,"send":0,"wait":24,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_96d18a6c918a404fa711b5e6cd7b8745~mv2.png/v1/fill/w_50,h_47,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_96d18a6c918a404fa711b5e6cd7b8745~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_96d18a6c918a404fa711b5e6cd7b8745~mv2.png/v1/fill/w_50,h_47,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_96d18a6c918a404fa711b5e6cd7b8745~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 1751\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-n9n8j\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRngCXSbRNNtoZSBQhuTmbr0J\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: geVkXqRdkuWimhy22iHF-hQBqjdPHe7hSuVtoDAWBOIrhNhjpiHuIg==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fde430fd574da807ea203f0e26057fc3","sha1":"00d54b6dba7105a07d6baf88c3bcd6261cc6d001","sha256":"6eedb3639dc03c907b72183860c10ac90d9be85c116fe727ef0ed3a1ebfe88f0","sha512":"730d39019a54bf0185e79a4030bcc7f949a6ea90d72a1f09551485e45c6d21115846e0abeb0f176a0643ef0b0ee7aaa8755a2adb05cdba1c410725db787b33b4","ssdeep":"","tlshash":"da310851d3c43dcac4cc0bbd055b072716b09071739bb8beac16fa44c991a338832e64","first_seen":"2026-02-11T03:10:55.195435Z","last_seen":"2026-02-11T03:35:28.204841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.co/1/i/adsct?bci=4\u0026dv=Asia%2FQyzylorda%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261920%261080%2612%2624%261920%261032%260%26na\u0026eci=3\u0026event=%7B%7D\u0026event_id=5e585efe-fdca-4d0e-9013-b00b403dcf18\u0026integration=advertiser\u0026p_id=Twitter\u0026p_user_id=0\u0026pl_id=9bdba59f-cab2-49b7-99a2-b3c3b3810863\u0026pt=Yucky%20Ducks%20%7C%20NFT%20Community%20with%20Giveaways%20%26%20Charity\u0026tw_document_href=https%3A%2F%2Fwww.yuckyducks.com%2F\u0026tw_iframe_status=0\u0026txn_id=qgsek\u0026type=javascript\u0026version=2.3.35","fqdn":"t.co","domain":"t.co","tld":"co"},"ip":{"addr":"162.159.140.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 10:48:36 GMT","end":"Mon, 13 Apr 2026 10:48:35 GMT"},"fingerprint":{"sha1":"E4:B9:D5:EA:F9:09:8E:3F:79:67:C7:48:1D:AD:7B:BD:80:87:D0:08","sha256":"0D:6D:F0:3E:96:B9:AE:13:A4:68:BF:24:A5:B3:D2:42:D0:4B:83:A3:6A:06:DB:72:60:71:74:0C:14:A2:9B:3D"}}},"request":{"raw":"GET /1/i/adsct?bci=4\u0026dv=Asia%2FQyzylorda%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261920%261080%2612%2624%261920%261032%260%26na\u0026eci=3\u0026event=%7B%7D\u0026event_id=5e585efe-fdca-4d0e-9013-b00b403dcf18\u0026integration=advertiser\u0026p_id=Twitter\u0026p_user_id=0\u0026pl_id=9bdba59f-cab2-49b7-99a2-b3c3b3810863\u0026pt=Yucky%20Ducks%20%7C%20NFT%20Community%20with%20Giveaways%20%26%20Charity\u0026tw_document_href=https%3A%2F%2Fwww.yuckyducks.com%2F\u0026tw_iframe_status=0\u0026txn_id=qgsek\u0026type=javascript\u0026version=2.3.35 HTTP/1.1\r\nHost: t.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: text/html;charset=utf-8\r\nperf: 7402827104\r\nserver: cloudflare envoy\r\nset-cookie: muc_ads=ee262ab3-cd7c-4b2a-b12d-71fc982ca18f; Max-Age=63072000; Expires=Fri, 11 Feb 2028 03:34:57 GMT; Path=/; Domain=t.co; Secure; SameSite=None\n__cf_bm=wcSAeGseidEV9DSjsYfNzXHAar_56F4VQSXF38Q3Whk-1770780897.2944515-1.0.1.1-L5vf_MphcJqB2T64UymB_eSabL78w9KcVSfqMiBbsGbbSuW9DRNHE9qebJTzV0JR0n2anpJ6XavcVBeWqrDgehgJLqV5BCijufDwg2oUBN0qFjFwZ6nYAp0Ffenkb49n; HttpOnly; Secure; Path=/; Domain=t.co; Expires=Wed, 11 Feb 2026 04:04:57 GMT\r\ncache-control: no-cache, no-store, max-age=0\r\nx-transaction-id: 5371d3a33b71ca38\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\nx-response-time: 8\r\norigin-cf-ray: 9cc0cb201a170daa-OSL\r\nstrict-transport-security: max-age=631138519; includeSubdomains\r\nx-served-by: t4_a\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9cc0cb201a170daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T18:53:52.295863Z","times_seen":17859444,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":105,"dns":32,"connect":42,"send":0,"wait":143,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/file.woff2","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /file.woff2 HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17636\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: \"69868f85-44e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YM40jBmzMDwSJhigR14DLBfhLSYNgWGTjW4hjmYaedF%2FeJIDyoMNl90684iXPkqETCjBTyJ6Cv6W8T4cyBqv%2BmaAN89JOmDYWoG1cxveCvrFZ3ZQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0cb226f718be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17636, version 1.0","md5":"f0229ef53b5d4fa12e13862cf2451f31","sha1":"d212373dd70c25bd4b90c81ae0eb60f691cb3d0c","sha256":"b01347b59ed85634ac59d7aa31caad61fb02ae3adb2d64386ddccbdb02d75550","sha512":"f2090f335784862cf210ceb28e472c112d13faa42b1d913585ab595dab6ab4ed0627e47e56785d520be516c5ee12c4cc006548cd5ea775594e9b3707b8c69c59","ssdeep":"384:7EZURIv9xap38JMZk4GyTBsFkQwFsZbUIBv:gZLWF+y50ZbUI9","tlshash":"0d82d0936f162694e13cc47d8d82a239435dbddb26ec4a95103441eb9ea2f5413da1e8","first_seen":"2026-02-11T03:10:55.197017Z","last_seen":"2026-02-11T03:35:28.206517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_0251cf7fafad4f0f913fa9bb84f24439~mv2.gif","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_0251cf7fafad4f0f913fa9bb84f24439~mv2.gif HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 19786188\r\nage: 911417\r\nserver: openresty/1.27.1.2\r\ndate: Sat, 31 Jan 2026 14:24:40 GMT\r\nexpires: Sat, 31 Jan 2026 15:24:40 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Fri, 24 Oct 2025 07:22:19 GMT\r\netag: \"f765d3ec97a123621ecf96f9e02afb79\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7f5c99766c-2ndh9\r\nvia: 1.1 google, 1.1 0091ee978574700d165730d7f2557c34.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 1hY-7xASk1e_4RMJj7CmYGYJyW_y1Uj5JsFW4dYm6ikhDRWEs8z5Xw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19786188,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 718 x 720","md5":"33e57d7fdcf0fd15d6bb1b8b8788efb5","sha1":"8013025bda79a58a122535974d903d74bde7b0dc","sha256":"e3ae6884b059ad923bc2e1d3720dec4dcc5c9e98c374b651ee96fa02afc703a9","sha512":"956c3d98938af867f1f47664d720c6d5abb31847c55b5939331d2584441ea80c2ad29684b4930f2557770bafe98557ca460d0883497ff2f2fe4bfb7833d719db","ssdeep":"24576:Zj/qbi9e+h87/bjMyxKMmH5Dh/CsUiN8cyBL43LNZO:Zj/qgDh8rbbw5N/Cs98eLXO","tlshash":"2525333dc9dd446b018f378a917edf4d65ad8e87aced987f398519133e00c76292888b","first_seen":"2026-02-11T03:10:55.237688Z","last_seen":"2026-02-11T03:35:28.207344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2831,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/56b0d2_9dd91179494d412f838cb6f5c22636a0~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/56b0d2_9dd91179494d412f838cb6f5c22636a0~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 661090\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 04 Feb 2026 21:29:31 GMT\r\nexpires: Wed, 04 Feb 2026 22:29:31 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Wed, 04 Feb 2026 18:04:51 GMT\r\netag: \"a6bfc03c384e51de5e19979b20d4bf2a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7f5c99766c-q8x4n\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: lQXV6H4zj1PYgqmmjkvtnUYpH3wtLbC4eIBhU6mkpsqeBEmQzbzTfg==\r\nage: 540326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":661090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit/color RGBA, non-interlaced","md5":"a6bfc03c384e51de5e19979b20d4bf2a","sha1":"3c6d9e0b4c6ab2b2191223bdd100f7d074419275","sha256":"e3c338182f21bb5d2bb93d10d2bacb39408c1bc8f8b11ab84274b4dc32f595ec","sha512":"d9c26ecfe1881f2fe2226d3e6e7ea3c4ae85648b1d476c5545030aee15ddfbf18acb66a89f03602df5a89426dd5a7801e9c812b57c917b2278732aa60eea633e","ssdeep":"12288:lZcxUjx2Iy2kXl6k0lQlodlrJO9WhJxfC7o4rjktLz1wb:l6xUl5yLXs2CL8cjx8/ktn1y","tlshash":"d2e4233fee95c485e8536a72588706e6a11af05f4db250b86163e63f3c0c442effad42","first_seen":"2026-02-11T03:10:55.220324Z","last_seen":"2026-02-11T03:35:28.208174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":96,"dns":1,"connect":13,"send":0,"wait":9,"receive":19,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/56b0d2_c4b058ac8f16468e874cd79be9df4efc~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/56b0d2_c4b058ac8f16468e874cd79be9df4efc~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 491624\r\nserver: openresty/1.27.1.2\r\ndate: Thu, 05 Feb 2026 17:26:59 GMT\r\nexpires: Thu, 05 Feb 2026 18:26:59 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Wed, 04 Feb 2026 18:01:51 GMT\r\netag: \"61e182387802bd4d843c3e2ddcb636ec\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7f5c99766c-n22fp\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: cibygQHFP0uQM66gLQmvaTDnh1FtOL37vNv8NG_PAycgxn7W6bHqRA==\r\nage: 468478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":491624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit/color RGBA, non-interlaced","md5":"61e182387802bd4d843c3e2ddcb636ec","sha1":"12d611e443e1bc53d2b305804cb62169020d8cd6","sha256":"adebe92a5a28598e4aee8655e27c0e83a94db299704bbf2193a28957c93e2d75","sha512":"6e95ef18ea5d79f0dbbdd6eae438492e572b2e91d9dac77c8a843092cd282d38905c90a656920a2d7bec67eeaa837b400d74aaf07e02a626cdbf4f683cce52d7","ssdeep":"12288:iY5k8krBiARulKYdS17xplpF7R/SQR34H+2QQhr7mD:iYLkrB1pYA17xdbP34HRQm7S","tlshash":"cea423eb96293790e4619a32d83540e743f37220eead0f7fbe4555994902cab341ef92","first_seen":"2026-02-11T03:10:55.23384Z","last_seen":"2026-02-11T03:35:28.208986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/helvetica-w01-roman.woff2","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /helvetica-w01-roman.woff2 HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36712\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: \"69868f85-8f68\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTAMpO%2BgbUZkhE7hBXCvOPfuvv75%2BkO%2Bmc707bwGqzXxEV5cORgLTuqB6xs7i3i4pR%2FpCV0vkaLJPalE6FBnASswVPTILPQsalsgncBNhQjjESz0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0cb226f6f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36712, version 1.0","md5":"0fac23f802a9152765d92c55a996396f","sha1":"3dd4b8491ac6ec963b0d2508228170f557947b34","sha256":"fcdfd6f1841b7b145fc382858a45c8342ab62abb0766db43431ab2de54253e97","sha512":"3751242d9c351e00c13a6ac7b5d432b362ad2e61dfc24c99db0973619e5a48a94f37789e29f8c29b4119bc75ed25421d91205ec50a19684e7ca1b9407404dd94","ssdeep":"768:GUu68IxKaFMHmp+jSCnGloz7jGHLUr1xB3uK/mg7cLtaqNX/JU9eTjCtAmBTZx3I:GFIxKatp+uCGloz7jq0xJuK/1utacPJp","tlshash":"f4f2f104918caf3f6a5104e6978b0e956ef9e1d6b5716f7f21280c9e6c8b2b94348dcc","first_seen":"2023-08-10T00:38:17Z","last_seen":"2026-08-12T15:02:25.59767Z","times_seen":14979,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/rijG6I_IOXJjsH07UEo2mw.woff2","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /rijG6I_IOXJjsH07UEo2mw.woff2 HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10464\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: \"69868f85-28e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJ4gSsQq5T9ODNPHu705dDu3cL%2Bv3HydbVXQcIGI3WdfPqCyFKvgcjaDRRMOsQ%2BII0QGI08V06B6WIcPr%2BjLhkR4vOhqXDqFqn3m8hiBPChjhZHw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0cb228f748be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10464, version 1.0","md5":"6fc407b725b0f9f3c7bd99efe9c9b232","sha1":"ed72d23629744e348b9cfdda745306f6a2ba1262","sha256":"091bb0de0a818620d0fa529df0edee88a5ac2244b5396edbac0a527035cf4af7","sha512":"bcddb64833f197ffc78d483a28cbe00d74532daa04e6fef8e3d85c40b2d2aa4b03165232304bce7bc8b92737ab21c05623939bfb6e6bfae54a329e4e9b0104b2","ssdeep":"192:kiBRcPXcF3Nru8uk2ie+W5DK2P0Mx0HKasnyDPSmzC7K:xRKXk3tu8uk+l0eMKasnyDPSE","tlshash":"8f22c03ca0a80721251b863fc98d76f125ec38873d2fa1a984d76cfca3b741d1617a25","first_seen":"2023-05-09T01:48:01Z","last_seen":"2026-08-12T10:21:49.874272Z","times_seen":4190,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_e006f799b4164553bd33e39e06db9986~mv2.png/v1/fill/w_330,h_381,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/Group%201000000940.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_e006f799b4164553bd33e39e06db9986~mv2.png/v1/fill/w_330,h_381,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/Group%201000000940.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 48281\r\nage: 1477\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:20 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-k264q\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRnjifr3j4FF6TyEnyaxN4mY2\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 0091ee978574700d165730d7f2557c34.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: y7zIna2q9pXV2bQ708TvgNXvzpRpKj7d2_pS7VC3zcMUU2NXMSUllg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":48281,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e4bf33ff63ac0f90e66b05dc330f7634","sha1":"f758014a50619432e344068131279a26d5f12f07","sha256":"5bff867cdda245fad986eb34f65e30ef31ad45fe030259770f1163253b662daa","sha512":"9dcad7e6485f9410961375c8007a677fe615a7280e0f4c0ab4790262e45bb628736167047d8991f0055e82e8f1413e55d0481e19c6e991c700e028f132085c27","ssdeep":"768:LOU5s7505tRNCAqXlJwVVN1FulSu09OnvhmZsyyQnYQ7jPzXbZDN4YtbLYOPt4N8:iOsmnRAAq/wpgq858ywYQjXbtFPPt28","tlshash":"fa2301b271d21430f6a2d9bf031ebe3935f438b822de2684826c65ced9758489c167b7","first_seen":"2026-02-11T03:10:55.228074Z","last_seen":"2026-02-11T03:35:28.211514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_b3433f6efafd4dae8efccdf1ab071a1c~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/index_1.html","date":"2026-02-11T03:34:57.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_b3433f6efafd4dae8efccdf1ab071a1c~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 13250\r\nage: 354445\r\nserver: openresty/1.27.1.2\r\ndate: Sat, 07 Feb 2026 01:07:32 GMT\r\nexpires: Sat, 07 Feb 2026 02:07:32 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Thu, 23 Oct 2025 08:09:56 GMT\r\netag: \"3f87b6fd8b192b3706c4c01e2c9cc8c2\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-5c5886c497-s5j44\r\nvia: 1.1 google, 1.1 0091ee978574700d165730d7f2557c34.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 2EgD7O5H6hDLXdeeFvnCCqPa3HGqQrn0dLu2zo28VKHkWzA4_DSqww==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 88, 8-bit/color RGBA, non-interlaced","md5":"3f87b6fd8b192b3706c4c01e2c9cc8c2","sha1":"3c9c8eb6fc731111c1ddac051a53f40ff123b52f","sha256":"ea4de0c2ddb294967690b2d1732ace0cd23205d288c5bb8672de4f4cb0b29e3c","sha512":"b8093c421bffc2ca820ac3ecdd94e4c86febcdccdc3ac3091dc734cf626ed83f7a11b4c86e283a71a0f4126dd30407a20e8ef9e2cae841c514cfffb4b09a0d3c","ssdeep":"384:RZy9ZRuGk+Gm+oI58Q0Q+QWxVqvQhFdcCdUqCA+:or1uoI58iaLcCdUqj+","tlshash":"8252bff25aaf39c5049bad4c451780763531221eb5ec8a0ee7c7d58e2a8202beaf1f11","first_seen":"2026-02-11T03:10:55.236895Z","last_seen":"2026-02-11T03:35:28.212346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T03:34:56.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 03:34:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFHJ5Filq2MQeS38sI1q0rFRMAjDEPeARZ7oMhZByKmkUYdPNJXavIHq2sh1qFeKZruIlA5%2B2RFuq4sDlrGbu2BkZ0Md8MRxIgTiEf6N6LqFwAGH\"}]}\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cc0cb1d2e5f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Wix","description":"Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.","website":"https://www.wix.com","common_platform_enumeration":"","icon":"Wix.svg","categories":["CMS","Blogs"]}],"data":{"size":1045062,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6d41f790468964c5188faf24396b0cf2","sha1":"4e25d814467e7f2c4ebfeae1b90c3c0ae087ea13","sha256":"50d95fb8861591106a0d65d8ff5e37be9d3ea3c34bfb5130e55de7a999a182e4","sha512":"3f799af6a050ec276a292e41c6eb1f8d71c025f4feafcf1ec545e031df4d87b17dac3c746320a511cc1c0f58063f65e26b3b9cf60cd36d3077db4a44ef8ae926","ssdeep":"3072:BNa44m5QLEiaRdBIWBoWX8eW/PEOpWMfDsUOpWM+LRUOpWMzY4EZtnNpcsmLcGMz:BNa4G6da/hlY4EZtnNSsmLC","tlshash":"d925a3a65af310d8794b91bd2feb22057732f003da0aec183eec32548f966e595d275c","first_seen":"2026-02-11T03:10:55.226061Z","last_seen":"2026-02-11T03:35:28.213349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":21,"dns":5,"connect":3,"send":0,"wait":25,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_9fa8958083194390af17c82ed4f5a067~mv2.png/v1/fill/w_49,h_47,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_9fa8958083194390af17c82ed4f5a067~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_9fa8958083194390af17c82ed4f5a067~mv2.png/v1/fill/w_49,h_47,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_9fa8958083194390af17c82ed4f5a067~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 1761\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-mg4r8\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRniNYSVl8z15hi27ex4VJllq\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: EVEnQjqvaADS3QpSAhL3EsD7QyqZawHKA7nVZ8CKVIaIgSpUstL4Rw==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1761,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"40bf6514a9c250f91e269cf0841d6564","sha1":"c621892cfe15be8e14ba74e954f0f8cd49308339","sha256":"08a362d129501f9d01ea390304838ce766048edcf4e3fed87e9d2b44d52a0ddc","sha512":"11ee963ad61a8bd4317960e03ec5330563a3ca6a4c256f135081730040c62fec663ef613fde213fc76b351809ce2062d62dc1c8cf674b3cc6e5a6b5e608401b1","ssdeep":"","tlshash":"1031b80831202e96d44c977225cf632b3792d73457aba830aab6f435492a777c46dd4c","first_seen":"2026-02-11T03:10:55.201247Z","last_seen":"2026-02-11T03:35:28.21438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_c0f1d2cf382d466884f947ba8c0ae676~mv2.png/v1/fill/w_1736,h_401,al_c,q_90,enc_avif,quality_auto/5e1948_c0f1d2cf382d466884f947ba8c0ae676~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_c0f1d2cf382d466884f947ba8c0ae676~mv2.png/v1/fill/w_1736,h_401,al_c,q_90,enc_avif,quality_auto/5e1948_c0f1d2cf382d466884f947ba8c0ae676~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 1772\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-svdxq\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRnbLC6NBRz8TqCdSkIyOulTu\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: cNJa375T6bNUjGuQ6C-33CfL5oiG126VOc89g4gInayI2uRBm_evjQ==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1772,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2a67df35558137905afb358fb348dee0","sha1":"0154d5c164e4975ecb39b9a8272924952ae6a6d4","sha256":"2259a964cae95476e0f73c368acac1e38c0c203ad381cdde3ff8076a2ad410d7","sha512":"6bb935a2050e4c38d5af509b9bcd89579380882b78f694174da4740546ceec89957fe455cb3a04e086f9b536dfc7b116181bd4f17da1d2d2a01494fe0e07c4fd","ssdeep":"","tlshash":"0331944833151856c889677c1a724b1637b297d443efad68e5c8793c093e7f08d29e0d","first_seen":"2026-02-11T03:10:55.235334Z","last_seen":"2026-02-11T03:35:28.215448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/index_1.html","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 1477\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnhiG%2FS9sDpH64llFPtbhqLdYrjBwvxve6XMeU2CkGTBGS%2BeZfsNGoagUYWVeJ4efWcJTT04Mmpq6aREwKXJrXuTKm9wV0Q3M9cFhJsps7IiKsmd\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0cb224f6c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5311,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"91e63c78ae739701110651f4528abbee","sha1":"e4f2e983c6f997b2fcad2b3ef330de72065899a4","sha256":"81c205eeb4266bc193b827944fb0f6d39c034c930530ac6364142fd2a07008e0","sha512":"2a442c3636e4095f8e8d87338c37532b7473ff6fdc25fcab99d6e4af0f0c0e459035b4ea11a67e077b30c47e2246f9b532d522651795233a336f87ae4b6055e3","ssdeep":"96:QG1hDUEYkCejvgFCsuWouqa4VTuqdUVRYRrRaR8RmRHRZRiRjR9RDRF:P1hD2eDsuWtqpSq0RYRrRaR8RmRHRZR+","tlshash":"0fb19412c8f108fa993018c45c73962deaa1b633e767ddb27adc4d81ef88d20975794a","first_seen":"2026-02-11T03:10:55.216893Z","last_seen":"2026-02-11T03:35:28.216513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2 HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7900\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: \"69868f85-1edc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J14zPgmCCIw6s5Ze0y8CoNoa3okExozut7ATJ1DUBOAUNYCqHmbJ%2FJOGZTPId1wgcqMMt7w7NwhRoRgD2qNJHclp89uSPrnYCgDuA%2F0BuzRW%2FBKc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0cb227f728be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7900, version 1.0","md5":"43751174b6b810eb169101a20d8c26f8","sha1":"7e48d54b1df1d3f657fc90227590308183ff9ddc","sha256":"3dc5d0c52428fe1696264907a1054ebbaac07f8cbe45832c105f819c2ae397c0","sha512":"a56307976583f9f0dd41ea34a3878c1fd69d5f89577664c350be014f6485da077cecf03f315104dc00e3cb0b6036d9b58e602ca19e963bf500016f090ca80ff2","ssdeep":"192:J2+QXwv9y8UEem7iQD+hqsNl3ahSFsd8Rq0s+Hxf49:J2+9vI8XX+DxrFe0/f0","tlshash":"dcf1bffef23115d580b66bb6c307bf24d9298147fc772608a61c6978a4e9f0c194cf0a","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-12T18:56:25.288801Z","times_seen":25120,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/9VWMTeb5jtXkNoTv949Npfk_vArhqVIZ0nv9q090hN8.woff2","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /9VWMTeb5jtXkNoTv949Npfk_vArhqVIZ0nv9q090hN8.woff2 HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10400\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: \"69868f85-28a0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5%2BcrfMVLOetdl4Bi4qjxFkvjyyqu3OJqsVmUjNsH1mz%2BzqjIhskswMAOwBHElV8QYG2Gv64%2F5S9pLVK45x%2BS59FHQF%2BbKMdjvixkRkEQnlMX28H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0cb228f758be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10400, version 1.0","md5":"fd88a4e0f78acd1481cba622eb0ada7e","sha1":"8242beb884b0c0ada3cdaedb9386d9ce5d9a7acc","sha256":"5654b0e267ff835ebdb0b8f09e24b7a393bd0818b68d475e1729c3dd59af4f67","sha512":"6d0d5be82e87a7b8f427b13c4bdd7a6b2baa0e1cad33c7d373eb253ae2869b46b1121c50d24f43a0dc1e7719aedb3d3e0319bd28f92baa5ce5f2115a09586ad2","ssdeep":"192:+D6Bk4zC9RwJz+UDRkiiSN9l94qVj0yxplafjezkagZN2ZHm5XOW1pv1SY3:+DE/8pUDOdSflNN0yxQeznEwZH5WAY3","tlshash":"ed22bf8650878f4f83c68bf591b31a35f24489595c0457498e0ac0f67b94f4ffb09c92","first_seen":"2023-05-04T03:36:39Z","last_seen":"2026-08-12T10:21:49.898893Z","times_seen":6406,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/favicon.ico","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T18:53:52.295863Z","times_seen":17859444,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_a4d9385ae4af4b29bcc33e32a1662271~mv2.png/v1/crop/x_8,y_167,w_1905,h_713,q_90,enc_avif,quality_auto/5e1948_a4d9385ae4af4b29bcc33e32a1662271~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_a4d9385ae4af4b29bcc33e32a1662271~mv2.png/v1/crop/x_8,y_167,w_1905,h_713,q_90,enc_avif,quality_auto/5e1948_a4d9385ae4af4b29bcc33e32a1662271~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 135621\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-7b8bb59956-rhvlw\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRnhBO2zuFGrca7m8AAYvp1y7\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: MG_tU9lOY5M3xwWG_4M2cGgrvnw3twQlvucOWx3orFiSchBqgk2Oqw==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":135621,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f885d0cbe2c7b7c5f6b53dccf2abf2f3","sha1":"419692ee4fc4827326113f3f47839fadd458167a","sha256":"4c3dfee288e7a5dfa575620b4910f07bb345290e4583d9287613737886adb77e","sha512":"dfbdc8496a51ec89b0bf646cbae7a9537aae8227cacf0c213c218307ff65a5e218e9d1f6be70c3ce3ae669ee70c63c68972d82aa74456aa86020d649526dc81a","ssdeep":"3072:UKivmfOmFv9m0QoH8etqwY3j35/8U/mW3KlAQ5Mi87PDB5:gf6w0Qhed45kAmW3KqQ5Mi8r15","tlshash":"2bd3122288cc81c233f9e6de172396a2aded4d4359863a85ee44d51eecfd07b35056cc","first_seen":"2026-02-11T03:10:55.200079Z","last_seen":"2026-02-11T03:35:28.219151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":105,"dns":12,"connect":1,"send":0,"wait":45,"receive":6,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/file.otf","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-yuckyducks.com/index_1.html","date":"2026-02-11T03:34:57.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /file.otf HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 98224\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: \"69868f85-17fb0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2Bnwfr0KEAMLRbpAIYyxfVsQS9NJr1lJ%2B%2FLWaWwmCrWunX4377kp5AblxyxVxKlmxRNytdaS0eil8xHF5ggoAs46IMRxQ0pQtOjiLpFKPG%2BMNkk%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0cb230f7a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98224,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"7bf54390580792f7375497fd2fd0e16a","sha1":"ea01d010d68d6bfd086bc1bf4f867f546f288e44","sha256":"d25833df3577cc278f06ab8d17e1cc0e7a1ec8646fc348a509b773efe11375fd","sha512":"b49265ec62ec708611d990a90770152233b23a0210b5d389d8e6ecf00c830ff604c3fca90246e55d33b1f93326f3865782aa6b188bd00f50e628447924ab764f","ssdeep":"1536:OHPzeoYJ+nsiC2ms4dli/dgcwV52/x77HXcwQmkNgd+3SpWXfbRQdh7sB:+PzeoPXPms42/3wVMZshu0icvdO7sB","tlshash":"1aa36cb6b5dce454d59a9332b6a5cde80623bfc8a8402560bfc43d8fd587e2f4272247","first_seen":"2026-02-11T03:10:55.22429Z","last_seen":"2026-02-11T03:35:28.220669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/56b0d2_af7af93237e846349a93d283726da90f~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/56b0d2_af7af93237e846349a93d283726da90f~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 384631\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 04 Feb 2026 21:29:31 GMT\r\nexpires: Wed, 04 Feb 2026 22:29:31 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Wed, 04 Feb 2026 17:56:38 GMT\r\netag: \"548c532485a69807175e6448270d03e9\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7f5c99766c-l46l6\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 6yRGrNzEbhS8q7N629UshZfyVI604ipOtJwGcbGUTrdUtXVnhgFMzA==\r\nage: 540326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":384631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit/color RGBA, non-interlaced","md5":"548c532485a69807175e6448270d03e9","sha1":"f599da3fbc512a6c8f3be100826debd5d6d90ce5","sha256":"820d12cfa0274e4a60dc8a47d760aae7f1ad9af9f755ff42da5e6528915d0199","sha512":"79d6200ecf1c4358ee454b56d2eceece0df1b7c6322bddfc5851880b6ac8934ec0925552ce21863a3f24ad2f61456eb58147ae07fd92deec7b690db3467674f4","ssdeep":"6144:ohmc9jjVmw8IheG2e7m4/lg1jcMzClunm7/REKCCyVZwyu8Ia6LOpOC2qs5HkaL:cmcvv57tl98nmLREEfZxC0lx","tlshash":"6c8423b1799792b329ce6838ace259053d6317b904959f7cc0861b4ef1b4324ff538ba","first_seen":"2026-02-11T03:10:55.221719Z","last_seen":"2026-02-11T03:35:28.232463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":5,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_6d09bb0ad02a41ecb1827b46fd7ad326~mv2.png/v1/fill/w_1905,h_3257,al_c,q_95,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_6d09bb0ad02a41ecb1827b46fd7ad326~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_6d09bb0ad02a41ecb1827b46fd7ad326~mv2.png/v1/fill/w_1905,h_3257,al_c,q_95,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_6d09bb0ad02a41ecb1827b46fd7ad326~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 21493\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-w7gjn\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRnfL1toIKvuJgKqM34EOIwmG\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Pv6vR2Nt6RS_hyRyaBOmZv0D5mWRiuPhAMjsX7xa8XffsSfuKj4Rkg==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21493,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a362b9429a9bd24142a4801c365b1a79","sha1":"799229cc0135c1c5de0f7d0536b3305a7c8a5dbd","sha256":"991bef42f5be0e000c0c4bcbdc336382f37325d124466ec36714a84e491bd809","sha512":"ed4e631641aede7c770caf8384311a6027929a9c3d25431114b9e8e4778b2459f8aa04215930a007b8ec4fb32a15b8184cc8016794ba04db0c488daf65940455","ssdeep":"384:SodoAdPpQTy8djpdjfREr3igLvO7kj8re2NKc3ORIO/4wMwmTz/WaLt5aBh+Lj1F:foAdxQB7fRE+gDOeebKc3dk6wW/XL7aS","tlshash":"d0a2d093f8d2dbe5d1a8c33f56dac5f17ba6cbb5096c40858b0ae5082725e7ce321c50","first_seen":"2026-02-11T03:35:28.234252Z","last_seen":"2026-02-11T03:35:28.234252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":101,"dns":8,"connect":8,"send":0,"wait":43,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_d555d80d568a4f89ae11937eb352fff0~mv2.png/v1/fill/w_1625,h_756,al_c,q_90,enc_avif,quality_auto/5e1948_d555d80d568a4f89ae11937eb352fff0~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_d555d80d568a4f89ae11937eb352fff0~mv2.png/v1/fill/w_1625,h_756,al_c,q_90,enc_avif,quality_auto/5e1948_d555d80d568a4f89ae11937eb352fff0~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 55067\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-p6mjr\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRncmATU8jsBn37VdhfqYKfD5\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Wcjzmcq0PJbeNuR9A17G3jZoNGDuZ-Xo2EjCqj-I7f8gdS96hcw62w==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":55067,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ac9dd1152efe5b289922a227dafd56e4","sha1":"c41ce35761729cad1611f0816c46d53e36236146","sha256":"1869dc832189414a0389271a3d47f165714ba7a955cef3b306aa1750adc9cec6","sha512":"0ab97d2cb1b67bbc0f34013bc19d7470fc3471d6edaf5470fc0c9af1d85818443046de365b01abb6d9986b400b60df3a82967b0607999526978968eebcb53b1a","ssdeep":"768:4Tcpcr/S+z+fayRLe7gbPX10693inzXc+JhDwWILQ1auiwFJ0agjWM40Ahz0yM/:44e/Sa7QRbPl9hwwH6aDO0aqLAhz07","tlshash":"6b33f2bf2b29830ab0cbc3f22c22d718dfbb4745ef6535540c497226659e626e25ca74","first_seen":"2026-02-11T03:10:55.232938Z","last_seen":"2026-02-11T03:35:28.236539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/56b0d2_5ab0f5b212d7411093f543d25b6f3b26~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/56b0d2_5ab0f5b212d7411093f543d25b6f3b26~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 450147\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 04 Feb 2026 21:29:31 GMT\r\nexpires: Wed, 04 Feb 2026 22:29:31 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Wed, 04 Feb 2026 18:03:17 GMT\r\netag: \"981a973fb29fcc78e1147d422076a08e\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-7f5c99766c-bwk4r\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: KGX5mlo9PKgCSCWDYqPugky_LiCsbs1MSe3lCou9wVgUC4FabqYEUQ==\r\nage: 540326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":450147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit/color RGBA, non-interlaced","md5":"981a973fb29fcc78e1147d422076a08e","sha1":"fffb11d9bb82aa83ce1d154d726d15271f81a151","sha256":"993bbb9c46452fa980e331e50753218b89d452340e3d5783b3776d3ee8e3297d","sha512":"c105dc3e7ef2bd5dbdfe200774f63dd4392351b6903455627edfba14bbbdbdda17b9c143e5ed4ed8ba9676ac4e2acdf5cf7fc19bf1521596a45f69dd6c4a2ff2","ssdeep":"12288:GR+vjk32IrnOw0by9j6xZsxxcY1bPrx5Ri8BwfF4xfnlYXJxHn:GikmonOw0uClY7PwFcnlcVn","tlshash":"45a4238b68b7788f83eb3d350f928314951c6465d7a78b27f51f7e2a09030f96914e39","first_seen":"2026-02-11T03:10:55.226955Z","last_seen":"2026-02-11T03:35:28.23825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":46,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_27790f968f55481ab92b1bf6264d216f~mv2.png/v1/fill/w_49,h_47,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_27790f968f55481ab92b1bf6264d216f~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_27790f968f55481ab92b1bf6264d216f~mv2.png/v1/fill/w_49,h_47,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_27790f968f55481ab92b1bf6264d216f~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 1659\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-fdv4f\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRnc7nrskmwIvG1cgM3VhqUav\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: yN3UOyTfSLiJ-vxctz_jqhcw8A6eOMfLAGiLgzOM3heBRd2Z9RwzWA==\r\nage: 1478\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P2\",cdn-rid;desc=\"yN3UOyTfSLiJ-vxctz_jqhcw8A6eOMfLAGiLgzOM3heBRd2Z9RwzWA==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1659,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1219d684014951383c9eb9c76b34867f","sha1":"e93d86c060761cd545c2e3481f7c6a3259330bc2","sha256":"2ee9a78beab18adce6238f4e1b8e052e716b28b0ec6835e93149f508c1d0f32a","sha512":"c5bc35b695436a7cff1529b9891446d8663eaa3de1d3b28b6dcb794ab9722ea1f6e6994cdd6d8de4434dbc48b0480f2050a84b278587310dbb213b8f19999f47","ssdeep":"","tlshash":"4431c5c1735c6d03c9dc82b40afe73873a35ca0523a670695c617aa04824ff2c57ac84","first_seen":"2026-02-11T03:10:55.23888Z","last_seen":"2026-02-11T03:35:28.239816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/ee4cfc_9caa2eb9f0a846ccac97c3f2ac44dcdd~mv2.gif","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/ee4cfc_9caa2eb9f0a846ccac97c3f2ac44dcdd~mv2.gif HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 19400194\r\nage: 911417\r\nserver: openresty/1.27.1.2\r\ndate: Sat, 31 Jan 2026 14:24:40 GMT\r\nexpires: Sat, 31 Jan 2026 15:24:40 GMT\r\ncache-control: public, max-age=15552000, immutable\r\nlast-modified: Sat, 18 Oct 2025 15:41:46 GMT\r\netag: \"3b63854317813312ed163d2b330e477d\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-5c5886c497-vfdsz\r\nvia: 1.1 google, 1.1 0091ee978574700d165730d7f2557c34.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: BHqYPkF5YOqX1XhY6nAj1SZQUo-l4EzmJ26SIIusDtKUlKVUYnCnDA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19400194,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 719 x 720","md5":"5b42593ca6d79e5ac7b5ba6b6e475c55","sha1":"37c8a443c1bb51b9ee76612689fe07596c1b5781","sha256":"170f8f078d69bb719e77360ebe0705488638ab6edf79037675da1f04a6b230e6","sha512":"a1efdd96b6b14ad06493d83f995f4902a750cd3b725de50966ce48f6f7fb4dd0615930b2367b7d5e7f00cc638773cc6b68a6669285e4e77274ab75df3dfb0372","ssdeep":"24576:LXT8TT99lv1M5nt43sEVTR7wYTR+OH0bf7S9AAD:LXTg7v1I0sYTxGfW+AD","tlshash":"3d2533ea00d7fdcad7f03c890b1af581f520ba12748d985173aa2f455685ef6d2b3632","first_seen":"2026-02-11T03:10:55.225161Z","last_seen":"2026-02-11T03:35:28.241443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1826,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/secureproxy?e=jscdn/getFile","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-yuckyducks.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim-yuckyducks.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"od1beu8zmw3ihtjpa984\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6KYFqmFnWRRK5DkAvasanTrnjz9cS4PxPqcKXr7IRR9TaITP%2F2duWG8JxM%2BOaNz4alzJP1EoCfKHXYxqK0M%2FTBFMXrph2y2P6waJ6SqwIpXnIw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0cb23ef7e8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3424248,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"afe4816396d8a3270506c223720f8c8c","sha1":"fa7dbd0f72fc47ed5e370eb04d5e785b2e2c9624","sha256":"83e9a077b228cfe7f2f121b361c09d9e53140ab10b1fdecabb3702abecf54c63","sha512":"e123cc06c771bad59d6c53374b4d714c3a1d818f158c69407d052c66d4deac937ef7174af2903e9e0c41fc53eb5fc10d4483011ed6176d6c99bd659b9b87b990","ssdeep":"24576:oGV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdjK1z:oG7OwPEZJsZKp","tlshash":"c12533013eabf9950f8caeba30fb3d0769401f81488d58dbea21e5c4556877681ddf1e","first_seen":"2026-02-11T03:10:55.231181Z","last_seen":"2026-02-11T03:35:28.242904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2838,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":310,"receive":2525,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/element.ch.Cztv5Fvi.css","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /element.ch.Cztv5Fvi.css HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: W/\"69868f85-18ab\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1477\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFU3ZuDmBHBtyhW32iEczX2z7QYQZyuwlu6Y5iH9Qg2kPiLfH9sQNhOXYsFobZAY5ZHte12hAjbwOKj1brO4kpfgfTMKFTdaVUrBvLgX6nn1Fnr3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0cb1f0f498be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6315,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6314)","md5":"fa54c1f2b680f3c7f70c65184d69bb03","sha1":"3320fb8929fad69536bb4f83b8862dbde4cc9d4c","sha256":"1eb4cfb9e95bc165e84cb10fb20cfe5acacbc89dd48a8fe7abdf54ca99c86eb9","sha512":"90fdbb45c2ab9e39cf4050bbf838194f23f2763526f0fd01ada872d5d53f31bda5b9db45d92df95edf96a2ca33d4b412ad1e5f41e01a6298ef62116abe8d40e3","ssdeep":"48:rnF+gynUstetUM4CqYR24ZKOVebUilVtggB5D8IGZxezyMg5Hy5g5N9t3+GIjbML:rnbsi4mBVYUqt1gt6uH5SC5Tj/xd3+S","tlshash":"f8d1443281c53f6ea4124736299ddbfdb0edc23385650779eedfa220028645a4bed5ce","first_seen":"2026-02-11T03:10:55.199072Z","last_seen":"2026-08-10T08:31:06.338891Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/plotly-2.24.1.min.js","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /plotly-2.24.1.min.js HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: W/\"69868f85-eabd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1477\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QO7SZcYbZqHUCLSgJUdBTeooJStETVPJ0L9mbB4xbl2S5%2FUj08RyOlXdtLSCSTkUp%2FMsxwf%2FKW8tw%2B1f%2BZrsWOoSFm2PxMTBGMtr%2B0L1RxN%2BCLSQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0cb1f0f4b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60093), with no line terminators","md5":"e5d1d17d3d3ca767b38d547b04558784","sha1":"5a887026b2c63b108b3c69e3168d9000bd842e88","sha256":"04075fa2923df63228edc7a13bb5cc4f329128f3f2bc35f3845eda5fd2930bd7","sha512":"c97ef61061e30ca8f4989a2c2c08cbff10b4768426c36245b4e1bd1ff263447307ac6b103c88df0e78a28da4cba3485919abb43ca588d7935135f9aa4059fff6","ssdeep":"768:GdlsFcK7iLSCddzllm/1Z3IuyyufhMmGPWTp8NUQscQXpcLo7Yck5EqYwmZ97vjh:riCDHyy0Wmn8NUQL1KcjA4S","tlshash":"394374d91516d0da8e9220dee833e509e4a8ee13cd6cf263923cece1751df12859b17b","first_seen":"2026-02-11T03:10:55.236126Z","last_seen":"2026-02-11T03:35:28.252126Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_324abaea80844a3aae5a488acbe28522~mv2.png/v1/fill/w_1905,h_643,al_c,q_90,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_324abaea80844a3aae5a488acbe28522~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_324abaea80844a3aae5a488acbe28522~mv2.png/v1/fill/w_1905,h_643,al_c,q_90,usm_0.66_1.00_0.01,enc_avif,quality_auto/5e1948_324abaea80844a3aae5a488acbe28522~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 14656\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-24t9g\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRnhqzp2hXLwtJwT1Fp2Q41Ch\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: MaaUh9Uvlv0BWiEryAAbSEy_XxqOOg0A5zOCkYa9xwRnQdfNmUcCEw==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14656,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f00ff3784b8240d94839a21b1714e078","sha1":"f6148db2f1c66ff83386d54a3d1d01f33c321de1","sha256":"092773e7e7ac9ed8b60b24b2473d0362172b981c23b367135d97ad8080e46746","sha512":"3f34d5465c40c637619c1367289c1cb6af76748aabf4c8988c4f1d0bae17ee4b3ac27dd74c1f69070ecdcf536674606be5cb4387b214918fb99ee7b3ac239521","ssdeep":"384:SzytoAJDtZrkMCNzB6G+hWKuhuRVhhbBrIzNSsr4Z3nPl:2cDtZVsd3KHNDENSsi9","tlshash":"3962d06ef2c35d02c6dd4971cd77b22b6314467e82b77d24a2c2f2b4e5bc530221c6a5","first_seen":"2026-02-11T03:10:55.234596Z","last_seen":"2026-02-11T03:35:28.253942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/69274ae6e5f90a4bf1bd6727d5d28e681b2751e6.svg","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /69274ae6e5f90a4bf1bd6727d5d28e681b2751e6.svg HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:57 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69868f85-d0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fonAf%2Fekhlqh4IWEotlTJAHdyGmRyP5LD%2FFCzxp%2FjjcNbzR841CFYO3FI7sUixqaVyT5FwmdMgNKG%2FG1Fc3Fh1%2BET%2FC47ADuY3xIkj4pG%2BlSziuC\"}]}\r\ncf-ray: 9cc0cb226f6e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe83e718787d375de992f8d620d250ab","sha1":"69274ae6e5f90a4bf1bd6727d5d28e681b2751e6","sha256":"4628703ac13de5dd1258673cb1b70d2aa3b3258737ffc70600a67bfc49917190","sha512":"e7a3a303f406c7300fc8654de5e6ec8d69271de94c3eb3684e2e5cc3dc751e77147343de6f0ffdfefd4aba1bc5dc5a34b144bbf2bd926ea5518e1283ca44915a","ssdeep":"","tlshash":"23d022a582e8196fe00be3f7c538ae18ec96b4d003a2052ddd880b30df0c1643ec0248","first_seen":"2025-10-07T02:50:38.913494Z","last_seen":"2026-03-28T14:45:16.116518Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/44a4d5_d8a6ecbd8b9d455181185c828bfd44d2~mv2.png/v1/fill/w_237,h_63,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/44a4d5_d8a6ecbd8b9d455181185c828bfd44d2~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/44a4d5_d8a6ecbd8b9d455181185c828bfd44d2~mv2.png/v1/fill/w_237,h_63,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/44a4d5_d8a6ecbd8b9d455181185c828bfd44d2~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 11034\r\nage: 1477\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:20 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-p6k5k\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRno29eQPdwS5DgZPqE1fa5WI\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 0091ee978574700d165730d7f2557c34.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: JvtAEV0E3_-dx2C4fLj7wMKPKol99tfjjBfx2pKCkYtiyTY45Pzfbw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11034,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"986772cb05631888fb485618b1508ff9","sha1":"717e12e213d4adea227c411917b12100cee22a9d","sha256":"4f1859b459ace3ea12c67a4630d3dc880a90f76affabdddf7e9a3f9f73df8c07","sha512":"0881feebe05a0d5cd0bb8edf405200c7e554e8caab20f9122858f2273e4ea9bbdace9f4622e3a34ab2bf00b7f24b7fd6628d3a629eda35f6c987c92443f35574","ssdeep":"192:+zCOjoKlAvJFZ2dJ/ORXjxzC+rSTLSIEmbBoj3AAZZeT1bP/Mnv801C:S1rqvJnoQTE+rUxVbBojwAiHy89","tlshash":"bc32d03d50f00127d3c891f4039d7b977fc20a9d6eebd3944e76694902f66ab29c184e","first_seen":"2026-02-11T03:10:55.228944Z","last_seen":"2026-02-11T03:35:28.257089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/44a4d5_59226e49c588429e8f83cf30e59260be_mv2.png","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:58.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /44a4d5_59226e49c588429e8f83cf30e59260be_mv2.png HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 50735\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: \"69868f85-c62f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwWtgmiNZmd2qly2izLNUQUgDlWZt0%2FxKaSogepF7AdzDe5REPDyxHKpbyEYsmAMWDdH0FNCrCf6tmsXfH5W%2B8oxZ2HnY2GnNFz%2F8C1Qe6GtJIBE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cc0cb25afa68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"38cd9eb125f6adefef8b92a1c12f8d48","sha1":"d8832679851b6e86afd542bc1380f1d082ab3020","sha256":"584fc8e2e0501f457b73b31d740939d1a98b17ba7619fcedca9424d6a9f17d17","sha512":"23d72983a84067c46a93ff04053c077ad8c8ca2ef749c245b2d900d9e6afb74546a3ca46580117db62f521763e44692a00881649de188d8496923864087a1c9e","ssdeep":"768:ZbpSiaNvc5XY2BA6KBLd2nTgWzCrWws0AhjCiopansu4yQoBzxKaPUg2W1wuHG:Zw+5I2BkT2nhm/OhjHqasuhzK8Ug2Mwj","tlshash":"f73301d4058ee1b0fcaed736ce6687950b937d64438fa11509568d323e6bed45fb8c80","first_seen":"2026-02-11T03:10:55.202199Z","last_seen":"2026-02-11T03:35:28.258537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":29,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/ee4cfc_3c991a33bf7445f18dc56edaa972b05d~mv2.png/v1/fill/w_92,h_92,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/Yucky%20Ducks%20Logo%20White%20with%20transparenr%20Back%20(1).png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/ee4cfc_3c991a33bf7445f18dc56edaa972b05d~mv2.png/v1/fill/w_92,h_92,al_c,q_85,usm_0.66_1.00_0.01,enc_avif,quality_auto/Yucky%20Ducks%20Logo%20White%20with%20transparenr%20Back%20(1).png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 5768\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-8zcms\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRnerhX2OspfL3nFo8EhOsxxe\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -EiFxloZs9uyY1kgkVjq_vpC_NSC0acdvKU8m8CG3xujWqkTZ9bkhA==\r\nage: 1478\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P2\",cdn-rid;desc=\"-EiFxloZs9uyY1kgkVjq_vpC_NSC0acdvKU8m8CG3xujWqkTZ9bkhA==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=22\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":5768,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2060c9c6b4d3768c65ff7d0cb91de972","sha1":"0d2a421b3014a29664b68c85f0af2aab2cc746b3","sha256":"497220cfab210c11e10450bb077b8f11e8f991c7dc470efccd40533a6bc9c5ba","sha512":"8ba97d391cc9a9798202351e470fe7e3b6f340807ad26f98dc0e9b82e9449f60bbd0eb072b8373d9a2a57ae1ba04acff340a4a697a4ad16c9b63c00ac57ca8e7","ssdeep":"96:+zCjyHOMU2gS4s5nSgJ1IbiW6NeQIpz9iNdd51jHPzyg4JMK:+zCuO5fSbSW1IOW0FIpz9iNddnfyNf","tlshash":"1fc16c2fe155ae93d4c04ff1d5447a2a61e891e0873fb0645fea7c10bc33251836be51","first_seen":"2026-02-11T03:10:55.23209Z","last_seen":"2026-02-11T03:35:28.259855Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":35,"dns":11,"connect":1,"send":0,"wait":63,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/ee4cfc_611706e1caf34709abdb1b8c52ec281d~mv2.png/v1/crop/x_0,y_2,w_250,h_248,q_85,enc_avif,quality_auto/ee4cfc_611706e1caf34709abdb1b8c52ec281d~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/ee4cfc_611706e1caf34709abdb1b8c52ec281d~mv2.png/v1/crop/x_0,y_2,w_250,h_248,q_85,enc_avif,quality_auto/ee4cfc_611706e1caf34709abdb1b8c52ec281d~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 10299\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-55bf8d875c-548cs\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRne8Uin7ry0TBtz6WcgAWwsB\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: wNNEeVS_5_M52S2VwBlGqPUBOKrKqtrzA8xbxN0WLszu782w3PqmSA==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10299,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"819d2a089f4dc17be04dff9dcfbf26cb","sha1":"9e5faf80809d860c76e22be29a4ac39956a20bea","sha256":"c5925ec0e8cb5175c6b2d9321c61fee1a142fe9070cea205ceb1ce1ed995f1cf","sha512":"0e3c9d67a01c814052dba319f0fcbc3059059363d94c8af76a0537c2397462a6feb79b05a4af2d178108da3d5d0118a868b951dc9f08d2ecb53e1ddbdabf345a","ssdeep":"192:+zCzFSxA9x3s7jYdHIFMvvDr7mXi/0vI8Tgbhr/8TFlKOtIg:SoS8s18vDr70eATgbOS6J","tlshash":"9122b02f31f24111f8de6178550e87919e10a2fbde3396115187743a2d7b07dee76d20","first_seen":"2026-02-11T03:10:55.22269Z","last_seen":"2026-02-11T03:35:28.261125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-yuckyducks.com/44a4d5_59226e49c588429e8f83cf30e59260be_mv2.png","fqdn":"claim-yuckyducks.com","domain":"claim-yuckyducks.com","tld":"com"},"ip":{"addr":"104.21.85.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:58.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-yuckyducks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:06:26 GMT","end":"Fri, 08 May 2026 01:05:00 GMT"},"fingerprint":{"sha1":"29:69:21:29:C0:58:A1:57:BC:51:7B:AB:7F:3D:0E:07:0B:FD:16:81","sha256":"E1:9E:F2:CA:51:0A:9D:92:2C:C8:71:FE:30:17:26:83:E0:E5:77:50:D4:34:D0:50:39:02:FF:E1:1D:C0:55:1F"}}},"request":{"raw":"GET /44a4d5_59226e49c588429e8f83cf30e59260be_mv2.png HTTP/1.1\r\nHost: claim-yuckyducks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:34:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 50735\r\ncast-mode: default\r\nlast-modified: Sat, 07 Feb 2026 01:04:05 GMT\r\netag: \"69868f85-c62f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1477\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wc9AAR8nRACmeAw02q%2Bh0DZbakHh4xxOd%2FHQLl8tqhjk6MldD3B9fEQLrVDWWLorR3S8qa79EsJ7twMdqYnieqiMU8gNKWm%2FsjJ67u4TK3%2FwnU1B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cc0cb25afa78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"38cd9eb125f6adefef8b92a1c12f8d48","sha1":"d8832679851b6e86afd542bc1380f1d082ab3020","sha256":"584fc8e2e0501f457b73b31d740939d1a98b17ba7619fcedca9424d6a9f17d17","sha512":"23d72983a84067c46a93ff04053c077ad8c8ca2ef749c245b2d900d9e6afb74546a3ca46580117db62f521763e44692a00881649de188d8496923864087a1c9e","ssdeep":"768:ZbpSiaNvc5XY2BA6KBLd2nTgWzCrWws0AhjCiopansu4yQoBzxKaPUg2W1wuHG:Zw+5I2BkT2nhm/OhjHqasuhzK8Ug2Mwj","tlshash":"f73301d4058ee1b0fcaed736ce6687950b937d64438fa11509568d323e6bed45fb8c80","first_seen":"2026-02-11T03:10:55.202199Z","last_seen":"2026-02-11T03:35:28.258537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":28,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"claim-yuckyducks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/5e1948_e28665deeddb4529988133c51b4acb6e~mv2.png/v1/fill/w_1902,h_1950,al_c,q_95,enc_avif,quality_auto/5e1948_e28665deeddb4529988133c51b4acb6e~mv2.png","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-yuckyducks.com/","date":"2026-02-11T03:34:57.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 11:08:31 GMT","end":"Fri, 10 Apr 2026 11:08:30 GMT"},"fingerprint":{"sha1":"44:FC:38:11:A2:3A:D0:EE:AE:ED:7A:6C:E4:6F:2C:E5:77:32:D2:2D","sha256":"B4:61:AB:14:ED:52:19:D7:4E:9B:19:A6:B6:9A:AF:1B:8D:FA:8B:68:3F:74:06:BA:B5:17:38:44:71:F8:BF:7B"}}},"request":{"raw":"GET /media/5e1948_e28665deeddb4529988133c51b4acb6e~mv2.png/v1/fill/w_1902,h_1950,al_c,q_95,enc_avif,quality_auto/5e1948_e28665deeddb4529988133c51b4acb6e~mv2.png HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-yuckyducks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 150566\r\nserver: openresty/1.27.1.2\r\ndate: Wed, 11 Feb 2026 03:10:19 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-seen-by: image-manipulator-7b8bb59956-5jg8f\r\nx-wixmp-trace: projects/wix-media-infrastructure/traces/39VRnhe9kn71ki4mbSOuW6smByy\r\ntiming-allow-origin: *\r\nvia: 1.1 google, 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -hH0nTZ9VapVdfjbS_26jpC7yf4iLG9T3WzP7CRjZ8HTV0frD7y2bA==\r\nage: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":150566,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2293a2a28d12040aac6a1aaa78a2d570","sha1":"309aba90e0001f83fcaa1b481827fa7c739d75ca","sha256":"c2327b4d1eb35b8c4e897dcae5ac120078b8aef461d0041a3b73f26fcfa72995","sha512":"0de7901f304d217c8b06b63bdb582cf41bdfd61f129d32ae2e4b65beda972fb2321f5040dad9a7a9e31f5eb1e1f2a22e30992973d6c4521a6df513f2a3a7701f","ssdeep":"3072:84tt/DgnowPj4s4VsFVs30JHHumnCGzY+Isgr2buE+2J8lO8ev95LATgIiHvQzIR:pJDmH4ys3IHjCyY+WdFzAT5","tlshash":"f2e312c31120656b31dd628205737d3a8441a5393b95f6c2ae0363f87bcfb25d8ea7d9","first_seen":"2026-02-11T03:10:55.218752Z","last_seen":"2026-02-11T03:35:28.262377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":94,"dns":10,"connect":1,"send":0,"wait":49,"receive":4,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}