s.freakyprizes.com/win?flow=sms&tid=5x2et123rbo53tbqkokgk484w,15234005,5,&ctrack=1669681580.710824060
94.237.84.54200 OK 3.9 kB URL HTTP/1.1 s.freakyprizes.com/win?flow=sms&tid=5x2et123rbo53tbqkokgk484w,15234005,5,&ctrack=1669681580.710824060
IP 94.237.84.54:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5882)
Hash 7c6bd647b0caf545787c4f63e52d9439
3921e09cdb5b84eff427fdad656076390375aa91
5757614bf7fe29cf0e0371d68cdb73a9f64258e86b72021d74a9145baa3d52c4
GET /win?flow=sms&tid=5x2et123rbo53tbqkokgk484w,15234005,5,&ctrack=1669681580.710824060 HTTP/1.1
Host: s.freakyprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Tue, 29 Nov 2022 00:26:40 GMT
Set-Cookie: XSRF-TOKEN=eyJpdiI6Ink2ck5pcjRpc28yZHl4blpKbllGU1E9PSIsInZhbHVlIjoiVlErUEtLRFEwZnozMEFGOURxRkl1b2hpTzd3RjJFL2NRWkVOdUhEMEFJbXVWQndLZlpzdEY1RDV5ZnBVbEV1cnlkSUhlbDIxRk8zT3o5d2duNG5PME5WZ3hDcHdLSEtnck9HTnhxb2RXQ3V0NGp1TjlqSkh0MWRMaUQ2U1UrTW8iLCJtYWMiOiIzMTU1NTM4Mjc0NDE3MjExMjYxZjY4NWZjNWNjOWYyZDYwYjgyNGY3NGEzMzMyZjljNzg0YmM0MWMyYTlmOWQ2IiwidGFnIjoiIn0%3D; expires=Tue, 29-Nov-2022 02:26:40 GMT; Max-Age=7200; path=/
ivr_offers_session=eyJpdiI6IjM2ek5udjh4a3drUkpFdkFQWkZSc0E9PSIsInZhbHVlIjoiaUhFUzVpTmV5SWVGT3poWEd2RnY3VGJad2Q0amxJZ2FEWGErZzU2M29nYXJJN2hpdGFOd29QejhmNzE3UXFHTHRvNHAwb0dMS3VFY3J5NkhWRVlGMzl2aEp0dHdFcjlBL3hETjZrbDlMOE5DRExvRkRyTUhWN3d5ZjZoL3IwaUQiLCJtYWMiOiI1YTljYTc0ZGI5MmM5MmVhYjM3Y2IyYzE1YWJkNjY2NjFmNzVkYTJhZmExMGY0MDMzMjhjYjE1NzRiYjkyNDAxIiwidGFnIjoiIn0%3D; expires=Tue, 29-Nov-2022 02:26:40 GMT; Max-Age=7200; path=/; httponly
SESS_TRAF=eyJpdiI6IlpIVkVud2xUQjlCNTFhVmczM0JTQ0E9PSIsInZhbHVlIjoiLytHRW1KaEs0bnBBUkM3RnVaTFdzSURBOEFhL2pFbTNMNkxpSkNuYkN6SCtUcm5GRlgyNTZoQy8wRTA4bW5GWjArSDB6VGl6VjhWaWwxeVNzSFlLUjVWTys1YUtWR1JhZ0ZHbHFVY3BFV3NQNklNSVBaTmtNTW45b200MlN0V05OSnNhd2ZYWFE3Ymw4MnJTNkRJOFQvMUJCczBkZG51cDNvNjdleDVHQUdjVGNlR1JkYTJGcnNuQTBRNDBlcVFGIiwibWFjIjoiMDMyYzZmOWVhNzNlOGUyMjQyMGYzM2IzZGY3ZGMyOWIyNGFjMzBhN2EyNTI5ODVhMzYzOWZlY2VkNzQwN2M2MCIsInRhZyI6IiJ9; path=/; httponly
visit=eyJpdiI6Ik4waFMrdk8vNWpNZnhzOE5GSnNOd3c9PSIsInZhbHVlIjoiQXNXeWhwNDMzblNvcU1aQlk3LytrbmZoNFlIU25wdE1JSG1NVC94eW1wU0RBWmY5WkNQUjFNQVhvelh4aThSdCIsIm1hYyI6IjA3NTBkOWQyMTBjODliNGYwNjZmNGFhY2FiOWY3MDVmY2VhMTA3ZTBmYWVmMTllYjQ4MmM2YmQzZTg1MjY2ODgiLCJ0YWciOiIifQ%3D%3D; expires=Wed, 30-Nov-2022 00:26:40 GMT; Max-Age=86400; path=/; httponly
IZ9gaCmcpYYEsgdfW5X2cfGGs7XfZem4n6eK6QBd=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; expires=Tue, 29-Nov-2022 02:26:40 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3098
Expires: Tue, 29 Nov 2022 01:18:18 GMT
Date: Tue, 29 Nov 2022 00:26:40 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9408cc0694fcbea57966c3a3ba906092
fddcee1fdcf3209298e41a4b1b5560357fa165f0
6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2002
Cache-Control: max-age=124683
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:26:40 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:04:43 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 00:19:33 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 428
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3b56944f0e5716fd4fad2ec18994d4be
61cafa4de31ba960d1145ec37272f6f6b6944e0c
4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3783
Expires: Tue, 29 Nov 2022 01:29:44 GMT
Date: Tue, 29 Nov 2022 00:26:41 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: yXOHYI/W0Bad5stsdSV8FkS217Ych6X86AghMMfz4zZnR3wpGmc3sN94OmLUZSeY8N2kisCqbgo=
x-amz-request-id: QP3HHB0W01JNNRE4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 23:42:16 GMT
age: 2665
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 00:26:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
s.freakyprizes.com/css/offers/win_push/app.css?id=64063b1eea3844c41932cef13ea02ae0
94.237.84.54200 OK 1.6 kB URL HTTP/1.1 s.freakyprizes.com/css/offers/win_push/app.css?id=64063b1eea3844c41932cef13ea02ae0
IP 94.237.84.54:0
File type ASCII text, with very long lines (5192)
Hash ebf276715a505d90bee5574780d2cf6e
9c653e16df2ed1105a0170ad6dd4b36389d419d2
5153cc4ef38449c96be3cc304dc0163a70583c6566d408664a689b78de4a6e24
Analyzer Verdict Alert fortinet Phishing
GET /css/offers/win_push/app.css?id=64063b1eea3844c41932cef13ea02ae0 HTTP/1.1
Host: s.freakyprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://s.freakyprizes.com/win?flow=sms&tid=5x2et123rbo53tbqkokgk484w,15234005,5,&ctrack=1669681580.710824060
Cookie: XSRF-TOKEN=eyJpdiI6Ink2ck5pcjRpc28yZHl4blpKbllGU1E9PSIsInZhbHVlIjoiVlErUEtLRFEwZnozMEFGOURxRkl1b2hpTzd3RjJFL2NRWkVOdUhEMEFJbXVWQndLZlpzdEY1RDV5ZnBVbEV1cnlkSUhlbDIxRk8zT3o5d2duNG5PME5WZ3hDcHdLSEtnck9HTnhxb2RXQ3V0NGp1TjlqSkh0MWRMaUQ2U1UrTW8iLCJtYWMiOiIzMTU1NTM4Mjc0NDE3MjExMjYxZjY4NWZjNWNjOWYyZDYwYjgyNGY3NGEzMzMyZjljNzg0YmM0MWMyYTlmOWQ2IiwidGFnIjoiIn0%3D; ivr_offers_session=eyJpdiI6IjM2ek5udjh4a3drUkpFdkFQWkZSc0E9PSIsInZhbHVlIjoiaUhFUzVpTmV5SWVGT3poWEd2RnY3VGJad2Q0amxJZ2FEWGErZzU2M29nYXJJN2hpdGFOd29QejhmNzE3UXFHTHRvNHAwb0dMS3VFY3J5NkhWRVlGMzl2aEp0dHdFcjlBL3hETjZrbDlMOE5DRExvRkRyTUhWN3d5ZjZoL3IwaUQiLCJtYWMiOiI1YTljYTc0ZGI5MmM5MmVhYjM3Y2IyYzE1YWJkNjY2NjFmNzVkYTJhZmExMGY0MDMzMjhjYjE1NzRiYjkyNDAxIiwidGFnIjoiIn0%3D; SESS_TRAF=eyJpdiI6IlpIVkVud2xUQjlCNTFhVmczM0JTQ0E9PSIsInZhbHVlIjoiLytHRW1KaEs0bnBBUkM3RnVaTFdzSURBOEFhL2pFbTNMNkxpSkNuYkN6SCtUcm5GRlgyNTZoQy8wRTA4bW5GWjArSDB6VGl6VjhWaWwxeVNzSFlLUjVWTys1YUtWR1JhZ0ZHbHFVY3BFV3NQNklNSVBaTmtNTW45b200MlN0V05OSnNhd2ZYWFE3Ymw4MnJTNkRJOFQvMUJCczBkZG51cDNvNjdleDVHQUdjVGNlR1JkYTJGcnNuQTBRNDBlcVFGIiwibWFjIjoiMDMyYzZmOWVhNzNlOGUyMjQyMGYzM2IzZGY3ZGMyOWIyNGFjMzBhN2EyNTI5ODVhMzYzOWZlY2VkNzQwN2M2MCIsInRhZyI6IiJ9; visit=eyJpdiI6Ik4waFMrdk8vNWpNZnhzOE5GSnNOd3c9PSIsInZhbHVlIjoiQXNXeWhwNDMzblNvcU1aQlk3LytrbmZoNFlIU25wdE1JSG1NVC94eW1wU0RBWmY5WkNQUjFNQVhvelh4aThSdCIsIm1hYyI6IjA3NTBkOWQyMTBjODliNGYwNjZmNGFhY2FiOWY3MDVmY2VhMTA3ZTBmYWVmMTllYjQ4MmM2YmQzZTg1MjY2ODgiLCJ0YWciOiIifQ%3D%3D; IZ9gaCmcpYYEsgdfW5X2cfGGs7XfZem4n6eK6QBd=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
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 00:26:41 GMT
Content-Type: text/css
Last-Modified: Mon, 28 Nov 2022 12:07:23 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"6384a47b-146c"
Expires: Wed, 29 Nov 2023 00:26:41 GMT
Pragma: public
Cache-Control: max-age=31536000, public
Content-Encoding: gzip
s.freakyprizes.com/img/offers/win_push/explosion.jpg
94.237.84.54200 OK 9.7 kB URL HTTP/1.1 s.freakyprizes.com/img/offers/win_push/explosion.jpg
IP 94.237.84.54:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x720, components 3\012- data
Hash 5d7514682cc143aacd42553b13d549d1
87c5254f1b8c292888c5dd96c5e7942c296da864
90a34421ccab2f30c85ef8e96aa9396a53ba2a009c2c3e756bbc9f1fc2aa0a4e
GET /img/offers/win_push/explosion.jpg HTTP/1.1
Host: s.freakyprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://s.freakyprizes.com/css/offers/win_push/app.css?id=64063b1eea3844c41932cef13ea02ae0
Cookie: XSRF-TOKEN=eyJpdiI6Ink2ck5pcjRpc28yZHl4blpKbllGU1E9PSIsInZhbHVlIjoiVlErUEtLRFEwZnozMEFGOURxRkl1b2hpTzd3RjJFL2NRWkVOdUhEMEFJbXVWQndLZlpzdEY1RDV5ZnBVbEV1cnlkSUhlbDIxRk8zT3o5d2duNG5PME5WZ3hDcHdLSEtnck9HTnhxb2RXQ3V0NGp1TjlqSkh0MWRMaUQ2U1UrTW8iLCJtYWMiOiIzMTU1NTM4Mjc0NDE3MjExMjYxZjY4NWZjNWNjOWYyZDYwYjgyNGY3NGEzMzMyZjljNzg0YmM0MWMyYTlmOWQ2IiwidGFnIjoiIn0%3D; ivr_offers_session=eyJpdiI6IjM2ek5udjh4a3drUkpFdkFQWkZSc0E9PSIsInZhbHVlIjoiaUhFUzVpTmV5SWVGT3poWEd2RnY3VGJad2Q0amxJZ2FEWGErZzU2M29nYXJJN2hpdGFOd29QejhmNzE3UXFHTHRvNHAwb0dMS3VFY3J5NkhWRVlGMzl2aEp0dHdFcjlBL3hETjZrbDlMOE5DRExvRkRyTUhWN3d5ZjZoL3IwaUQiLCJtYWMiOiI1YTljYTc0ZGI5MmM5MmVhYjM3Y2IyYzE1YWJkNjY2NjFmNzVkYTJhZmExMGY0MDMzMjhjYjE1NzRiYjkyNDAxIiwidGFnIjoiIn0%3D; SESS_TRAF=eyJpdiI6IlpIVkVud2xUQjlCNTFhVmczM0JTQ0E9PSIsInZhbHVlIjoiLytHRW1KaEs0bnBBUkM3RnVaTFdzSURBOEFhL2pFbTNMNkxpSkNuYkN6SCtUcm5GRlgyNTZoQy8wRTA4bW5GWjArSDB6VGl6VjhWaWwxeVNzSFlLUjVWTys1YUtWR1JhZ0ZHbHFVY3BFV3NQNklNSVBaTmtNTW45b200MlN0V05OSnNhd2ZYWFE3Ymw4MnJTNkRJOFQvMUJCczBkZG51cDNvNjdleDVHQUdjVGNlR1JkYTJGcnNuQTBRNDBlcVFGIiwibWFjIjoiMDMyYzZmOWVhNzNlOGUyMjQyMGYzM2IzZGY3ZGMyOWIyNGFjMzBhN2EyNTI5ODVhMzYzOWZlY2VkNzQwN2M2MCIsInRhZyI6IiJ9; visit=eyJpdiI6Ik4waFMrdk8vNWpNZnhzOE5GSnNOd3c9PSIsInZhbHVlIjoiQXNXeWhwNDMzblNvcU1aQlk3LytrbmZoNFlIU25wdE1JSG1NVC94eW1wU0RBWmY5WkNQUjFNQVhvelh4aThSdCIsIm1hYyI6IjA3NTBkOWQyMTBjODliNGYwNjZmNGFhY2FiOWY3MDVmY2VhMTA3ZTBmYWVmMTllYjQ4MmM2YmQzZTg1MjY2ODgiLCJ0YWciOiIifQ%3D%3D; IZ9gaCmcpYYEsgdfW5X2cfGGs7XfZem4n6eK6QBd=eyJpdiI6Ijg3ekFVNXo2blR5R211VGdWcmpqRFE9PSIsInZhbHVlIjoiUlVxSCtnVGpLZ3BOQ0R5MEFRMTJLVHI5RmltTExwYlFjSjg4bmVEakpIbmRsU1Brb0t3UUdJSUlIWmRQc2JuUm54Z0hBcUJUblRrbWtOMmhlbk1CZWxBVm1mVngrV0FLdlJmUU9JektkSWVGUVRsWDVpNko3VUlhVkJrUHNaVndYTXFHUDRzbFdvZFFZd2RIMFpxUHpjdGNmTzhoZEl5clZvUUpDQThHUGZ3bXRGM3ZZSVZFVWJzang2NlFQbldRZ2VLemlWUkJJZGRJOWNUV1h3R1RCZXo2VGxTalY1a1Y5UnZIODlPcm5QYzNGTTczaGNaa2U4ZXNxZ0FCUjg1YkhNTnZpaHBTTTFtWUV0WlNHZFQvTnJYNXltc2hMRVZIWUsralVOOTR5TE9FblZCYVNIWTB6U2MvU2UvWWxudHE3TGIyeUhkWDJRd2Q2bEFCbjFVMTJWcGh6a0ZlbWJzc1JhZTJJdzU3RzZFcDZ5eDRrOEhLMDV2TjMwTkpHU3VRY1dmemc1ZXgrZ1FnazZYS1hoRENSVEd2NytmV0xMcVdKKzJJMFVYUVdVcVVqWmRSczJHaVc4QjZiajRPUVhZNkVKNTN6Y2hiM2k4YU1ZYXIwODBqeXJVMXlyK21VcVJEYzFRdDBXMTJRdWc9IiwibWFjIjoiMmIwZGJiMjU3NTRhY2NhOTAxZDllMGI1NTg2MzYyODgwMDMzYTMxZmY2YWI0YzJjOTJiYWIzODIxZTk1OGE1YSIsInRhZyI6IiJ9
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 00:26:41 GMT
Content-Type: image/jpeg
Content-Length: 9735
Last-Modified: Mon, 28 Nov 2022 12:07:23 GMT
ETag: "6384a47b-2607"
Expires: Wed, 29 Nov 2023 00:26:41 GMT
Pragma: public
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes
s.freakyprizes.com/js/offers/win_push/app.js?id=614ed959f483df66f70ec0a860822972
94.237.84.54200 OK 80 kB URL HTTP/1.1 s.freakyprizes.com/js/offers/win_push/app.js?id=614ed959f483df66f70ec0a860822972
IP 94.237.84.54:0
File type Unicode text, UTF-8 text, with very long lines (65443)
Hash 35d36f21a3d72caea96f200af0fae45d
83a7eef53ca8d4378ae05c22c2a1e53ddfca4101
d13c2bde6d7533f7c3450934b50aeba3306747a728beeb1161531a51be46aa42
GET /js/offers/win_push/app.js?id=614ed959f483df66f70ec0a860822972 HTTP/1.1
Host: s.freakyprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://s.freakyprizes.com/win?flow=sms&tid=5x2et123rbo53tbqkokgk484w,15234005,5,&ctrack=1669681580.710824060
Cookie: XSRF-TOKEN=eyJpdiI6Ink2ck5pcjRpc28yZHl4blpKbllGU1E9PSIsInZhbHVlIjoiVlErUEtLRFEwZnozMEFGOURxRkl1b2hpTzd3RjJFL2NRWkVOdUhEMEFJbXVWQndLZlpzdEY1RDV5ZnBVbEV1cnlkSUhlbDIxRk8zT3o5d2duNG5PME5WZ3hDcHdLSEtnck9HTnhxb2RXQ3V0NGp1TjlqSkh0MWRMaUQ2U1UrTW8iLCJtYWMiOiIzMTU1NTM4Mjc0NDE3MjExMjYxZjY4NWZjNWNjOWYyZDYwYjgyNGY3NGEzMzMyZjljNzg0YmM0MWMyYTlmOWQ2IiwidGFnIjoiIn0%3D; ivr_offers_session=eyJpdiI6IjM2ek5udjh4a3drUkpFdkFQWkZSc0E9PSIsInZhbHVlIjoiaUhFUzVpTmV5SWVGT3poWEd2RnY3VGJad2Q0amxJZ2FEWGErZzU2M29nYXJJN2hpdGFOd29QejhmNzE3UXFHTHRvNHAwb0dMS3VFY3J5NkhWRVlGMzl2aEp0dHdFcjlBL3hETjZrbDlMOE5DRExvRkRyTUhWN3d5ZjZoL3IwaUQiLCJtYWMiOiI1YTljYTc0ZGI5MmM5MmVhYjM3Y2IyYzE1YWJkNjY2NjFmNzVkYTJhZmExMGY0MDMzMjhjYjE1NzRiYjkyNDAxIiwidGFnIjoiIn0%3D; SESS_TRAF=eyJpdiI6IlpIVkVud2xUQjlCNTFhVmczM0JTQ0E9PSIsInZhbHVlIjoiLytHRW1KaEs0bnBBUkM3RnVaTFdzSURBOEFhL2pFbTNMNkxpSkNuYkN6SCtUcm5GRlgyNTZoQy8wRTA4bW5GWjArSDB6VGl6VjhWaWwxeVNzSFlLUjVWTys1YUtWR1JhZ0ZHbHFVY3BFV3NQNklNSVBaTmtNTW45b200MlN0V05OSnNhd2ZYWFE3Ymw4MnJTNkRJOFQvMUJCczBkZG51cDNvNjdleDVHQUdjVGNlR1JkYTJGcnNuQTBRNDBlcVFGIiwibWFjIjoiMDMyYzZmOWVhNzNlOGUyMjQyMGYzM2IzZGY3ZGMyOWIyNGFjMzBhN2EyNTI5ODVhMzYzOWZlY2VkNzQwN2M2MCIsInRhZyI6IiJ9; visit=eyJpdiI6Ik4waFMrdk8vNWpNZnhzOE5GSnNOd3c9PSIsInZhbHVlIjoiQXNXeWhwNDMzblNvcU1aQlk3LytrbmZoNFlIU25wdE1JSG1NVC94eW1wU0RBWmY5WkNQUjFNQVhvelh4aThSdCIsIm1hYyI6IjA3NTBkOWQyMTBjODliNGYwNjZmNGFhY2FiOWY3MDVmY2VhMTA3ZTBmYWVmMTllYjQ4MmM2YmQzZTg1MjY2ODgiLCJ0YWciOiIifQ%3D%3D; IZ9gaCmcpYYEsgdfW5X2cfGGs7XfZem4n6eK6QBd=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
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 00:26:41 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Mon, 28 Nov 2022 12:07:23 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"6384a47b-3b264"
Expires: Wed, 29 Nov 2023 00:26:41 GMT
Pragma: public
Cache-Control: max-age=31536000, public
Content-Encoding: gzip
s.freakyprizes.com/js/app.js?id=a17d4361fbb31a501c27017e9f7507d6
94.237.84.54200 OK 64 kB URL HTTP/1.1 s.freakyprizes.com/js/app.js?id=a17d4361fbb31a501c27017e9f7507d6
IP 94.237.84.54:0
File type Unicode text, UTF-8 text, with very long lines (65474)
Hash 53412a9b8ac048092bd3d7a1e2cb8d2c
5bbbfdedc896685e2ef4bdfaafc5bb63e86177d9
cc5b4d5f2317ce3ea4d396c0d40636da3de8e9780bf13b99d00996c045e9e364
Analyzer Verdict Alert fortinet Phishing
GET /js/app.js?id=a17d4361fbb31a501c27017e9f7507d6 HTTP/1.1
Host: s.freakyprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://s.freakyprizes.com/win?flow=sms&tid=5x2et123rbo53tbqkokgk484w,15234005,5,&ctrack=1669681580.710824060
Cookie: XSRF-TOKEN=eyJpdiI6Ink2ck5pcjRpc28yZHl4blpKbllGU1E9PSIsInZhbHVlIjoiVlErUEtLRFEwZnozMEFGOURxRkl1b2hpTzd3RjJFL2NRWkVOdUhEMEFJbXVWQndLZlpzdEY1RDV5ZnBVbEV1cnlkSUhlbDIxRk8zT3o5d2duNG5PME5WZ3hDcHdLSEtnck9HTnhxb2RXQ3V0NGp1TjlqSkh0MWRMaUQ2U1UrTW8iLCJtYWMiOiIzMTU1NTM4Mjc0NDE3MjExMjYxZjY4NWZjNWNjOWYyZDYwYjgyNGY3NGEzMzMyZjljNzg0YmM0MWMyYTlmOWQ2IiwidGFnIjoiIn0%3D; ivr_offers_session=eyJpdiI6IjM2ek5udjh4a3drUkpFdkFQWkZSc0E9PSIsInZhbHVlIjoiaUhFUzVpTmV5SWVGT3poWEd2RnY3VGJad2Q0amxJZ2FEWGErZzU2M29nYXJJN2hpdGFOd29QejhmNzE3UXFHTHRvNHAwb0dMS3VFY3J5NkhWRVlGMzl2aEp0dHdFcjlBL3hETjZrbDlMOE5DRExvRkRyTUhWN3d5ZjZoL3IwaUQiLCJtYWMiOiI1YTljYTc0ZGI5MmM5MmVhYjM3Y2IyYzE1YWJkNjY2NjFmNzVkYTJhZmExMGY0MDMzMjhjYjE1NzRiYjkyNDAxIiwidGFnIjoiIn0%3D; SESS_TRAF=eyJpdiI6IlpIVkVud2xUQjlCNTFhVmczM0JTQ0E9PSIsInZhbHVlIjoiLytHRW1KaEs0bnBBUkM3RnVaTFdzSURBOEFhL2pFbTNMNkxpSkNuYkN6SCtUcm5GRlgyNTZoQy8wRTA4bW5GWjArSDB6VGl6VjhWaWwxeVNzSFlLUjVWTys1YUtWR1JhZ0ZHbHFVY3BFV3NQNklNSVBaTmtNTW45b200MlN0V05OSnNhd2ZYWFE3Ymw4MnJTNkRJOFQvMUJCczBkZG51cDNvNjdleDVHQUdjVGNlR1JkYTJGcnNuQTBRNDBlcVFGIiwibWFjIjoiMDMyYzZmOWVhNzNlOGUyMjQyMGYzM2IzZGY3ZGMyOWIyNGFjMzBhN2EyNTI5ODVhMzYzOWZlY2VkNzQwN2M2MCIsInRhZyI6IiJ9; visit=eyJpdiI6Ik4waFMrdk8vNWpNZnhzOE5GSnNOd3c9PSIsInZhbHVlIjoiQXNXeWhwNDMzblNvcU1aQlk3LytrbmZoNFlIU25wdE1JSG1NVC94eW1wU0RBWmY5WkNQUjFNQVhvelh4aThSdCIsIm1hYyI6IjA3NTBkOWQyMTBjODliNGYwNjZmNGFhY2FiOWY3MDVmY2VhMTA3ZTBmYWVmMTllYjQ4MmM2YmQzZTg1MjY2ODgiLCJ0YWciOiIifQ%3D%3D; IZ9gaCmcpYYEsgdfW5X2cfGGs7XfZem4n6eK6QBd=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
HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 00:26:41 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Mon, 28 Nov 2022 12:07:23 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"6384a47b-2e42c"
Expires: Wed, 29 Nov 2023 00:26:41 GMT
Pragma: public
Cache-Control: max-age=31536000, public
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b5c0458a10579921a67e5cf61b06808c
2a3ede303ae348a68a674449feac9cc3dd85f03c
f4d3b27d4b0f514a7b9f8182e76f7b02a643cc917b709104f28953b1e668c428
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4D3B27D4B0F514A7B9F8182E76F7B02A643CC917B709104F28953B1E668C428"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18999
Expires: Tue, 29 Nov 2022 05:43:20 GMT
Date: Tue, 29 Nov 2022 00:26:41 GMT
Connection: keep-alive
s.freakyprizes.com/img/prizes/iphone-14/default.png
94.237.84.54200 OK 16 kB URL HTTP/2 s.freakyprizes.com/img/prizes/iphone-14/default.png
IP 94.237.84.54:0
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash a4489535e9aeb4b71b7906000ea03fe6
3efe625170f5e9213f83b5124f53a5b7ce17bf68
813c1ddef261a03e267100c6b508ec7931c389fd06c0ced4621d0f94cc964863
GET /img/prizes/iphone-14/default.png HTTP/1.1
Host: s.freakyprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://s.freakyprizes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:26:41 GMT
content-type: image/png
content-length: 16233
last-modified: Mon, 28 Nov 2022 12:06:04 GMT
etag: "6384a42c-3f69"
expires: Wed, 29 Nov 2023 00:26:41 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 056a3e99d43c4e9459efba61f4649991
92a46f6e977d6d55bbb26bf219187d5262a92086
d73ca52e577d170c3c959b2cd9b0688b3b1d481b16df10bf9f6aab31d3f359d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D73CA52E577D170C3C959B2CD9B0688B3B1D481B16DF10BF9F6AAB31D3F359D2"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15213
Expires: Tue, 29 Nov 2022 04:40:14 GMT
Date: Tue, 29 Nov 2022 00:26:41 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8a099c42b34530493f0351f5000e1ec3
2f65927b6b634702f4b44a0c4beef27de49f0212
e07ffeb32cd4bca094b23482748c3c92d1413bd0257e0f8dc9a6b208ac410098
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E07FFEB32CD4BCA094B23482748C3C92D1413BD0257E0F8DC9A6B208AC410098"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 29 Nov 2022 06:26:41 GMT
Date: Tue, 29 Nov 2022 00:26:41 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b5c0458a10579921a67e5cf61b06808c
2a3ede303ae348a68a674449feac9cc3dd85f03c
f4d3b27d4b0f514a7b9f8182e76f7b02a643cc917b709104f28953b1e668c428
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4D3B27D4B0F514A7B9F8182E76F7B02A643CC917B709104F28953B1E668C428"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 29 Nov 2022 06:26:41 GMT
Date: Tue, 29 Nov 2022 00:26:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 00:08:55 GMT
cache-control: public,max-age=3600
age: 1066
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
s3ntry.net/api/18/envelope/?sentry_key=ccd7567c32f347d999f51c043b0ccde6&sentry_version=7
162.55.168.249200 OK 2 B URL HTTP/1.1 s3ntry.net/api/18/envelope/?sentry_key=ccd7567c32f347d999f51c043b0ccde6&sentry_version=7
IP 162.55.168.249:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/18/envelope/?sentry_key=ccd7567c32f347d999f51c043b0ccde6&sentry_version=7 HTTP/1.1
Host: s3ntry.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://s.freakyprizes.com/
Content-Type: text/plain;charset=UTF-8
Origin: http://s.freakyprizes.com
Content-Length: 434
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 00:26:41 GMT
Content-Type: application/json
Content-Length: 2
Connection: close
access-control-allow-origin: http://s.freakyprizes.com
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
s.freakyprizes.com/img/offers/win_push/winner/en.png
94.237.84.54200 OK 20 kB URL HTTP/2 s.freakyprizes.com/img/offers/win_push/winner/en.png
IP 94.237.84.54:0
File type PNG image data, 500 x 218, 8-bit colormap, non-interlaced\012- data
Hash b54c3e9eb768c045c38ed39a94e03b84
0305632e2eb0af2475781bd16e3c474a8b18fa8f
d3329012b6d2273e3c7bd4e814b6fae3ce150c0de1a675263963c845a1ff321f
GET /img/offers/win_push/winner/en.png HTTP/1.1
Host: s.freakyprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://s.freakyprizes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:26:41 GMT
content-type: image/png
content-length: 20379
last-modified: Mon, 28 Nov 2022 12:07:23 GMT
etag: "6384a47b-4f9b"
expires: Wed, 29 Nov 2023 00:26:41 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
s.freakyprizes.com/img/offers/win_push/tv/en.png
94.237.84.54200 OK 11 kB URL HTTP/2 s.freakyprizes.com/img/offers/win_push/tv/en.png
IP 94.237.84.54:0
File type PNG image data, 300 x 136, 8-bit colormap, non-interlaced\012- data
Hash 44cb48f0155519a548c4d10263e9acdd
ed42f062e187c134e2edb5edacab090b7bed1f9e
0e75845c61bf450f9ef4c01fb03019225d0910f55c3ca5f98844e18520a0adbf
GET /img/offers/win_push/tv/en.png HTTP/1.1
Host: s.freakyprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://s.freakyprizes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 00:26:41 GMT
content-type: image/png
content-length: 10779
last-modified: Mon, 28 Nov 2022 12:07:23 GMT
etag: "6384a47b-2a1b"
expires: Wed, 29 Nov 2023 00:26:41 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 349
Cache-Control: max-age=117963
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 00:26:41 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 09:12:44 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.39.57.61101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.39.57.61:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gDmXw8ulUMRQVk9T247/7g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4JcrDOT1481yommZ2sCZ0NXtsB8=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3125
Expires: Tue, 29 Nov 2022 01:18:48 GMT
Date: Tue, 29 Nov 2022 00:26:43 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3125
Expires: Tue, 29 Nov 2022 01:18:48 GMT
Date: Tue, 29 Nov 2022 00:26:43 GMT
Connection: keep-alive
d1u65k3qj4t7ya.cloudfront.net/carriers/telia.svg
54.230.245.69200 OK 1.0 kB URL HTTP/2 d1u65k3qj4t7ya.cloudfront.net/carriers/telia.svg
IP 54.230.245.69:0
Hash 9a93f29a2efbc981785b1caf7801274f
15cda17ea86a02953cf7ad082ceb0b67aec19659
a95062b32d85828a45e1a476a620c13ea7a0310e4548d577cae95fa9f80d3bf8
GET /carriers/telia.svg HTTP/1.1
Host: d1u65k3qj4t7ya.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://s.freakyprizes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Fri, 01 Jul 2022 12:26:39 GMT
x-amz-storage-class: REDUCED_REDUNDANCY
server: AmazonS3
content-encoding: gzip
date: Mon, 28 Nov 2022 19:22:39 GMT
etag: W/"c87c4b7324d0c7760e2c3c5ffb645dd7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E7rYnF44CZVDEcG3WvyuGSfSBLQYO0utpIsxvECIYQ8ON_LgAJNODg==
age: 18243
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83c1fedec73299637cc7dc47c48af758
2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 04:16:47 GMT
age: 72596
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a4058fd62595d15c58b3d3266de9865a
d0dff35eb78f129b5da407043037bcf9c27e55c0
ab996c23d58871a2ad53f0c34688c87f0d7c0eac5d0c1d8265b86951248449fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe059c7ce-454d-453b-aead-18fae338f84c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4871
x-amzn-requestid: e2dfa7b8-ded7-4104-a913-1b84746a3c6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLDUUEy_oAMFgSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638118e8-0b229e0f60ff019d26800dd9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 19:35:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qh3WqWdBmMG3fzchn3OvxbEpwm2wl_CXi105CL4uJda47N9ZX3CyLA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 08:56:43 GMT
age: 55800
etag: "d0dff35eb78f129b5da407043037bcf9c27e55c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cce27a1fe8c0222811a5ce0e7f89e1cb
28c165bac8cf68cd1b0763c311aece00672cb3a5
4530e34a47ef78c2c2b0d34a0511253a61f1927b192ab42f82361002ff10819e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9376
x-amzn-requestid: 265257bd-0177-4e63-879b-e9f99d0d16c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cTZANFW2oAMFlyw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63846ecd-6767ccde3361eb593108603d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 08:18:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ntQPVFK12XqhVCMlaq0oIDx7k6e2xQdp1Y67W1nG6ayhG1XFekz5CQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 09:53:30 GMT
etag: "28c165bac8cf68cd1b0763c311aece00672cb3a5"
content-type: image/jpeg
age: 52393
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e498db3-95ce-4479-abf6-4bdae77a91bb.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e498db3-95ce-4479-abf6-4bdae77a91bb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2144a0af1afef4b7bb1ae7c0d313077
68d599c6e35c546ee0f06939a557983ecc956c19
69b5c4194922e1b626ec0e0301c84e93bb4ac50aa85d5b80205c0efff2a360fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e498db3-95ce-4479-abf6-4bdae77a91bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11016
x-amzn-requestid: 6504e291-a225-4969-9faf-6d9bf69e9f18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cJXvcGVvoAMFvjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63806cc9-170cce9722cf26773b08b707;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 07:20:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OAs5vrbuyrAg2wK2GXmXMkezL540LgEv4KDj1VT0G05hJnxYgCcX8w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 10:14:18 GMT
age: 51145
etag: "68d599c6e35c546ee0f06939a557983ecc956c19"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae2e2986caa15a90b615147f229b51ec
c6dfd277cdbd057472e6df6ad1a200f50684d442
ec3799922c38ee6394601744ff4b2c405ee44c4718a2b90c104134657f8b480b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9015
x-amzn-requestid: 9f657586-a44e-46f0-8c38-f1bf26142486
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVOlEE6ZoAMFUPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852aed-1da2400f4165dd553418f8b9;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:41:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mqdz1NhVCqmSrhYLIF0miDzrBiS82SUU6ZRFzDMllbCwS70hC0rMRQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:55 GMT
age: 9588
etag: "c6dfd277cdbd057472e6df6ad1a200f50684d442"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg
34.120.237.76200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b421b66a29c15df61049ef5d5f34bc2
f3c1297885fa2fd37557222d5490dfb0afed19ef
3c88aecb898378f0d070fe9e9733ac42b89b57349e8e9f51ffb0508b88821980
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa7a7fb1-8e53-47cc-bd1c-80ab0e8ecd59.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3711
x-amzn-requestid: e9825e7e-0fa7-4165-9b59-f554a4bf1d6b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b_dkuFKToAMF1OA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c761e-7ebc3c3b480cdd94059616b7;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 07:11:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TQQiAdJwsSxsS2C-3y_SNOHPtiuPMKcfu-4Db4zlOjbHsTfRnHWl8Q==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 18:16:01 GMT
age: 22242
etag: "f3c1297885fa2fd37557222d5490dfb0afed19ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
d1u65k3qj4t7ya.cloudfront.net/carriers/telenor.svg
54.230.245.69200 OK 0 B URL HTTP/2 d1u65k3qj4t7ya.cloudfront.net/carriers/telenor.svg
IP 54.230.245.69:0
GET /carriers/telenor.svg HTTP/1.1
Host: d1u65k3qj4t7ya.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://s.freakyprizes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Fri, 01 Jul 2022 12:26:39 GMT
x-amz-storage-class: REDUCED_REDUNDANCY
server: AmazonS3
content-encoding: gzip
date: Mon, 28 Nov 2022 02:32:12 GMT
etag: W/"22ac04ea759d608fe69bc0db24dc915c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RQNDKoNyHJD0RzkByV2Fp6L68F56nyThg526yf9WnzzzyBZO0ZN6UQ==
age: 78870
X-Firefox-Spdy: h2