znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
301 Moved Permanently 0 B URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2 HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 03 Sep 2022 06:42:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4W7SkhpTq5sKJlYvLxGIMu7uxOvSHLY1sTzseq-LEz9lAoUBpxDTbQ==
Age: 2669
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9161
Expires: Sat, 03 Sep 2022 10:00:03 GMT
Date: Sat, 03 Sep 2022 07:27:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2Vrqsn2SKoEHYhk9_ea4Zl011DWXXuRjItCAI_EPQkQGOEA41g4WVA==
age: 22325
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 05fd5bf60f212e2bf62246a8ac9ccf22
d2701aeabb90e2fe75fa26da24bbdd271ecb9015
69abaecbbe8aecedb6e85156af2617c99524dc6d1b5b8594a1b7169a98ad155c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "69ABAECBBE8AECEDB6E85156AF2617C99524DC6D1B5B8594A1B7169A98AD155C"
Last-Modified: Fri, 02 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14521
Expires: Sat, 03 Sep 2022 11:29:23 GMT
Date: Sat, 03 Sep 2022 07:27:22 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 07:27:22 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
200 OK 20 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 36ff02b9e027a94215a67cacf99ed5f1
8765711dd53574f7b18db4d2d03cd8156a513f92
23075ba151793d9835e91665a06d8fe4321aa6f3d3f56a82740d58c3f0e29b3f
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2 HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.30
Cache-Control: no-cache, private
znkgk0trsntgjn.live/wheel_joker/public/css/slick.css
200 OK 1.9 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/css/slick.css
IP
File type ASCII text, with CRLF line terminators
Hash b06073c5a23326dcc332b78d42c7290c
64e6c5ff99f14c65752e0322234160f8e83fc6c2
f0b722c48c52082cd77261574e22a5251fe37ea4b291b1441134145bab9b2063
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/css/slick.css HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: text/css
Content-Length: 1895
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-767"
Accept-Ranges: bytes
code.jquery.com/jquery-3.4.1.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.4.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 9abb42735168ac9e960b770179b642aa
11475bf8c7244af7a820108b7762e7a3f95aa52c
df53c09a6546b3d23dc0b2d0d92c39808c5663a75f4bf1f8d035fd11b7c81243
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:27:22 GMT
content-encoding: gzip
content-length: 30638
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15851"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1662190042.dop211.sk1.t,1662190042.cds026.sk1.hn,1662190042.cds201.sk1.c
X-Firefox-Spdy: h2
znkgk0trsntgjn.live/wheel_joker/public/js/tel_code.js
200 OK 4.9 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/js/tel_code.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with CRLF line terminators
Hash c8ab86266b2061ed293f9e509c9ae7b6
9f6cbb32918989f0086a1676345efa0c75469633
eeb8245e03adaabb69c63e0bfdea9c28670a1a8811f6067205b86799086d2d57
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/js/tel_code.js HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/javascript
Content-Length: 4854
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-12f6"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/js/main.min.js
200 OK 8.3 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/js/main.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (8207), with no line terminators
Hash 99bd8030f9e75f01623f520c1ed05d7b
636828d5d11e7a1aa2324dff38cabb5b966c92fe
6376cd445cdc6715aec67bea0ab01984278b92cdd8cef2f8a521b557d34304ca
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/js/main.min.js HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/javascript
Content-Length: 8259
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-2043"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/js/jquery.inputmask.bundle.min.js
200 OK 118 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/js/jquery.inputmask.bundle.min.js
IP
File type ASCII text, with very long lines (65302), with CRLF line terminators
Size 118 kB (118408 bytes)
Hash 81ae7125aca15245f302d1e9743000b0
836b34fbe4e6f15e47c9e2a985c1131877bbf52b
c164506620ef1b70855bad138f751b8d785632d68ab008a3b737be5008eebc4c
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/js/jquery.inputmask.bundle.min.js HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/javascript
Content-Length: 118408
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1ce88"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/js/parallax.min.js
200 OK 17 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/js/parallax.min.js
IP
File type ASCII text, with very long lines (17272)
Hash 97a318c5dd971ceb013b04ee3a5a9c00
8fb86cc097c792f5cdd9c0e02c2be5bcc27ed510
1aa4cad8b8c65ae062f64172ceb16f7eb02242cee0ec506f6a18390b650b98e3
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/js/parallax.min.js HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/javascript
Content-Length: 17313
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-43a1"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/js/maskedinput.js
200 OK 17 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/js/maskedinput.js
IP
File type ASCII text, with CRLF line terminators
Hash 27c78693f1fdf71bc2b215d22e5f97f5
c5898028dc5a0cd1055822a96bc12ef9872fbc5a
481701be0c7cfa7ecc32e77b5599e6b4dec7faa0e278dc968c48e4558d6c6e90
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/js/maskedinput.js HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/javascript
Content-Length: 16612
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-40e4"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
200 OK 39 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
IP
File type ASCII text, with very long lines (39342), with no line terminators
Hash 02c8fcd261f7efc37e8f9d8a1e0298b9
f688cc931fbcf50d258f1dea1693cb15e33a6019
de17fb0cd7cf463283a6004a42ca7cb8a25477a36ba5754688e5a038c46c80f0
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/css/style.min.css HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: text/css
Content-Length: 39342
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-99ae"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-g-3.png
200 OK 5.9 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-g-3.png
IP
File type PNG image data, 99 x 82, 8-bit colormap, non-interlaced\012- data
Hash 5fde96cb08e1f214e31b5256fdf556a2
e155f8993ab3d1d865fdd4344ba4514728cc14a4
7fcbe1b8eb916ee18cba5d182a92d4d5cf1746605ad620542fd0fa06f090cc61
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/gem-g-3.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 5914
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-171a"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/eye_open.svg
200 OK 840 B URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/eye_open.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (690), with CRLF line terminators
Hash 3293ce633fb15223e31b0b51e5498838
bf57c0a7db15e82d6cc02709c78d56853002ceed
e7ddfd36be44d3f420a2e1d895d19734dc77a183803a15f987906c391e52647e
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/eye_open.svg HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/svg+xml
Content-Length: 840
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-348"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-p-1.png
200 OK 5.9 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-p-1.png
IP
File type PNG image data, 98 x 115, 8-bit colormap, non-interlaced\012- data
Hash ca9955a691c046440a5c40c170692e72
7020b66b8c9d03b4f43eac2ed19563d32fa8ca5b
0d25ada8afa1e3a8849e918f3281a21a185cd6e300caaa9c0e389055956248b0
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/gem-p-1.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 5870
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-16ee"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-p-2.png
200 OK 7.2 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-p-2.png
IP
File type PNG image data, 122 x 123, 8-bit colormap, non-interlaced\012- data
Hash fc4e325fb1bbaffefec6e1c1f579dd3e
fc61569fbc87703c38f3dca066d0a06179ad7aa3
07271e9bbdf8694c35478e09879b3a2b7dfc1c15a310701d13d0a69d0760072a
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/gem-p-2.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 7195
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1c1b"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/eye.svg
200 OK 1.1 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/eye.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (951), with CRLF line terminators
Hash 722111658276a9d72dc837d1857ca094
51368dafef89e8c6a25c78623f04e53237afd8d3
657d424b186f00ae82af3877cc4edba6e5c70c7f6690cd502a2a6a4ac01e25e7
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/eye.svg HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/svg+xml
Content-Length: 1121
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-461"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-p-3.png
200 OK 7.4 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-p-3.png
IP
File type PNG image data, 127 x 125, 8-bit colormap, non-interlaced\012- data
Hash a514a1e0e864b735db9407a16966f43f
41ef72a648b470801947598627785eace47c4466
e8713d2656a218b694651afe893c5e0f053439832aac833ad4f587dfe3e0d844
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/gem-p-3.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 7432
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1d08"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/logo.png
200 OK 3.8 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/logo.png
IP
File type PNG image data, 207 x 79, 8-bit colormap, non-interlaced\012- data
Hash 20065b01c107d15e15bf585286ff3f82
d0e05ce06b88ebf1beaa05c1120771013e1b2685
e68f837fe69438142a78cc66d8444613576cf292617184973850dd85d7f5fec1
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/logo.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 3819
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-eeb"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/down-arrow.svg
200 OK 160 B URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/down-arrow.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 8c8d878eaf5f526c135ab457a6974f5d
6785e4af42e76b6938a4b617550f8c98f73f3ab6
b8a8595c66901ff4e412ef47403d7d7fdb1144cd0d94673851c1dace2f3bba69
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/down-arrow.svg HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/svg+xml
Content-Length: 160
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-a0"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/wheel/light.png
200 OK 4.1 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/wheel/light.png
IP
File type PNG image data, 170 x 215, 8-bit colormap, non-interlaced\012- data
Hash c06adcef772df1254f8972bf8406f963
eb4d112962b063d16eb0ed7af6195030f8f74f0b
ea18fcd2d74976a8da303d59eac5ea6f6d1f15a80c37217a482cc2c4f68bf822
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/wheel/light.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 4067
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-fe3"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/wheel/arrow.png
200 OK 4.2 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/wheel/arrow.png
IP
File type PNG image data, 62 x 99, 8-bit colormap, non-interlaced\012- data
Hash 34ac1f7a393a01d61def255180479462
9f193a204edbc9f0fec01c415365d3e655413406
e912580f7105c198f72126d3a3c4b979b78c0caa527379379e296c9ac5f25542
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/wheel/arrow.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 4217
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1079"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/fly/blue_stone.png
200 OK 5.8 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/fly/blue_stone.png
IP
File type PNG image data, 104 x 104, 8-bit colormap, non-interlaced\012- data
Hash f13c200b941ceba146ea64ee2b76a152
6fed7cfd95852eef5466723ba3f8043ecbaa70e7
50ca4638572864eee90069218f4643eba53e27c32348578071d0fff383d6b0c4
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/fly/blue_stone.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 5781
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1695"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b69e4ee589f24deef7c8a3004daae9d1
e96ab184083a5084569b86b8846a6fa0c3b6af9a
7560417294eeb0f5c955d68bcc9b9eae40d69d1ff4b717a115ca1c614b1f4a17
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 07:27:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
znkgk0trsntgjn.live/wheel_joker/public/img/fly/almaz_stone.png
200 OK 4.1 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/fly/almaz_stone.png
IP
File type PNG image data, 64 x 65, 8-bit colormap, non-interlaced\012- data
Hash ecf74b532d3c2f7c0fdc7d073404e68e
e6dab5cc0027c178c45a2f783df14d4c4d2a07aa
d7958773e307fd52860866c343d3df502d5162de92602bb91bb892245ce7b510
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/fly/almaz_stone.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 4063
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-fdf"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/wheel/wheel-border.png
200 OK 69 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/wheel/wheel-border.png
IP
File type PNG image data, 621 x 595, 8-bit colormap, non-interlaced\012- data
Hash 2ec62f23ff11eb75d4c2292b0efe39e6
6ddc67b361c2db7addc84fdfaa66ab1840b588b6
9b8534fdad7e5dfb65679eab0a6d62779da96758af90d36e20641d7f4a9b77f0
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/wheel/wheel-border.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 69406
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-10f1e"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/fly/green_stone.png
200 OK 4.2 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/fly/green_stone.png
IP
File type PNG image data, 66 x 67, 8-bit colormap, non-interlaced\012- data
Hash bc740bb0ff528b1b6fe6054d7ec9506d
de4aea5bc0da6058ae32f203b8b1f95290f87e5e
dfdefe5a475057140aa2ba4862ad26dd480c2203d0031741914f2609ed01e288
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/fly/green_stone.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 4160
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1040"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/fonts/Montserrat-Black.woff2
200 OK 91 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/fonts/Montserrat-Black.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 91060, version 1.0\012- data
Hash 49d8861cff0f680b4fe81c3eb097c122
35a53fb91c8bc4b55e3c9457bee5eb0d1e0cff14
b78440cef291a9e1e12fbf0fe238828e77b2d55fe8f0dc045edf2f95f276099b
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/fonts/Montserrat-Black.woff2 HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/octet-stream
Content-Length: 91060
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-163b4"
Accept-Ranges: bytes
www.googletagmanager.com/gtm.js?id=GTM-K9F87TG
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-K9F87TG
IP
File type ASCII text, with very long lines (1615)
Hash 32f09231a2c199ec4cd4c43bee5f03e4
9524d228d4cfee78c2b7130f84e287440fcebe72
93ecdf5dd705528ee7ac2393c8542ec91ad4e0b4e37c6471912078a26046fe19
GET /gtm.js?id=GTM-K9F87TG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Sep 2022 07:27:22 GMT
expires: Sat, 03 Sep 2022 07:27:22 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Sep 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44844
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
znkgk0trsntgjn.live/wheel_joker/public/img/fly/pink_stone.png
200 OK 6.5 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/fly/pink_stone.png
IP
File type PNG image data, 94 x 94, 8-bit colormap, non-interlaced\012- data
Hash 201ddaa5eea6d2eb04e3672ff61d921a
9c618c668abc0f44169314ba6f44c722cfbf8dab
56d82d5d4940866b266f6e135e979bf2df76ead2494433b18392d43c251e6162
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/fly/pink_stone.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 6501
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1965"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/fonts/Montserrat-Bold.woff2
200 OK 92 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/fonts/Montserrat-Bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 92152, version 1.0\012- data
Hash 93d9e93cf0c696ccd695d9e780d1a021
97a0096e8aed7252b1547ed8bc7a549564bb9641
0e35a837e4f22c75cc03c4e501023d6f4ffe074c786064a9b2c0d27257897ac1
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/fonts/Montserrat-Bold.woff2 HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/octet-stream
Content-Length: 92152
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-167f8"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/fly/light_stone_blue.png
200 OK 11 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/fly/light_stone_blue.png
IP
File type PNG image data, 320 x 195, 8-bit colormap, non-interlaced\012- data
Hash f5841ecb5b7b288b0927d26036c51971
8b9ad58c5d41a7ae5dcb9c0eafada29d8087abda
18bb49a2cdfc8ff211396b8444eecc22572e4e4b8d6b10ae9a4a00681c0d0436
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/fly/light_stone_blue.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 11039
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-2b1f"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/fonts/Montserrat-Medium.woff2
200 OK 92 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/fonts/Montserrat-Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 91916, version 1.0\012- data
Hash ddf5f52dc8b5913e7b1dbe602f524b17
0953756316b73ad64182710a2ceff5dd6771fdd1
0d7790171470e1ad4a75bb060ff65dac6c7276f5f71ee4767909d28428173709
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/fonts/Montserrat-Medium.woff2 HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/octet-stream
Content-Length: 91916
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1670c"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/fonts/Montserrat-Regular.woff2
200 OK 92 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/fonts/Montserrat-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 92252, version 1.0\012- data
Hash cdac0e14416b03c27de1bbb6504372c2
8331a4a1021009614e576fbf0951cab73c08d378
5a20e13b860b22ce1dc3811957417fd91d6800aadcd415752b27d6f5bd9d0222
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/fonts/Montserrat-Regular.woff2 HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: application/octet-stream
Content-Length: 92252
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1685c"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/wheel/btn.png
200 OK 15 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/wheel/btn.png
IP
File type PNG image data, 217 x 219, 8-bit colormap, non-interlaced\012- data
Hash 9b807ea18d701e9de36ffc9ddeab9657
29f5b33ecca93fe29367ee975ec114df983c707b
1a9b90bfdc97604ec1e1ef4dc1536c43ac95185271bf1729e9e632b8157a430f
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/wheel/btn.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 15439
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-3c4f"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/box.png
200 OK 70 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/box.png
IP
File type PNG image data, 514 x 497, 8-bit colormap, non-interlaced\012- data
Hash 69cf725a3e4de079d17dc4254b9fb1bd
09900e90f8cdc7d8266b70079246e78fbe0a48fb
69a4f951baa4826c8d961163d09693672f283c68abf250e3a9327ef5c67d2579
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/box.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 70291
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-11293"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b69e4ee589f24deef7c8a3004daae9d1
e96ab184083a5084569b86b8846a6fa0c3b6af9a
7560417294eeb0f5c955d68bcc9b9eae40d69d1ff4b717a115ca1c614b1f4a17
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 07:27:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
znkgk0trsntgjn.live/wheel_joker/public/img/wheel/wheel-fields.png
200 OK 90 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/wheel/wheel-fields.png
IP
File type PNG image data, 437 x 438, 8-bit colormap, non-interlaced\012- data
Hash dbdcdba42c6fb1cd1a3b4b00aeb3d555
8d3aa9a68b7d09ffb6908cfb239771801c970b25
94c04152f131233410563ffca951729aafec3678876077806fd9bc7e3c41d38e
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/wheel/wheel-fields.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 90435
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-16143"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/maya.png
200 OK 69 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/maya.png
IP
File type PNG image data, 319 x 722, 8-bit colormap, non-interlaced\012- data
Hash b55353291925b87321f7ce95d4b05a56
291d00cdfade210e66fa6a46e83c691bf27da5f4
ecc6ff28087376d06b01858a4e972a206f5261a6694aa042f66b1ba8744d20ad
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/maya.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 68669
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-10c3d"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/bg.jpg
200 OK 255 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 255 kB (254946 bytes)
Hash 14c4939e6a384217d7afb44c94f2fc5b
e420d6b8ddf83e64ec674faf8a3d9811ce3127bb
f73d9e4f5e126bae7962b87e79be129eb0c02c685ff0bfe554a4bb3b944982c9
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/bg.jpg HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/jpeg
Content-Length: 254946
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-3e3e2"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/fly/light_stone_almaz.png
200 OK 11 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/fly/light_stone_almaz.png
IP
File type PNG image data, 258 x 253, 8-bit colormap, non-interlaced\012- data
Hash 760e579bfd2a85fe1d8efd3b580f277f
2fa028ab2a8bf97d9eb597e07f9c7d0b11585ea5
64664bc21b3d031f8b8268b8c0e11efb65ebbc8a2b2f0ae03e56f7c0395195ee
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/fly/light_stone_almaz.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 10730
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-29ea"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/fly/light_stone_green.png
200 OK 10 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/fly/light_stone_green.png
IP
File type PNG image data, 320 x 171, 8-bit colormap, non-interlaced\012- data
Hash 96f341916c96e340880aac83c92c78f4
e50a9bf43970f3afeb5518ad7caa2e5e4f8d4f4c
8a73278d9d752036a9ace0416b4ebf7ee5ed633b1eb46eba19a9cdd6be82ebf8
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/fly/light_stone_green.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 10138
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-279a"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/wheel/back.png
200 OK 100 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/wheel/back.png
IP
File type PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced\012- data
Hash eed4176026e684b5db107a03b5fb68ab
f446a048f521afd6edf92c80092e583198800098
f78e1d6a0b868e5c6ba83fef0e439c5a096001436961a2549624e1dabaf72184
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/wheel/back.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 99468
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1848c"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/fly/light_stone_pink.png
200 OK 11 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/fly/light_stone_pink.png
IP
File type PNG image data, 321 x 194, 8-bit colormap, non-interlaced\012- data
Hash 43fb91f6e64daf0a4456f49cfc2ea765
1fb06ed72c36235064020c9e44def027bae69fdb
36ba196ae6e64dccfde21470f1067efef3bce9462357d7491eb9ac0053df6a48
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/fly/light_stone_pink.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 10891
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-2a8b"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/man.png
200 OK 67 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/man.png
IP
File type PNG image data, 285 x 870, 8-bit colormap, non-interlaced\012- data
Hash e9304d18b166488f90aace01f1b225a2
ebc4a9118f064bbc530eef8e32f73d744b1f0082
e44a18bf17ca47846f2440904b6820ce63ba3528ada1fc2560f5cc3b54901233
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/man.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 67200
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-10680"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/coin-1.png
200 OK 10 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/coin-1.png
IP
File type PNG image data, 298 x 211, 8-bit colormap, non-interlaced\012- data
Hash 7b0e41692da9685540440d99d51c44b8
07d4fbd52bcb731b7d32caab148557d20080d927
33f61ba8b089375a0294c000d30532c196182ce970fed55fdd07ede2ff61da37
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/coin-1.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 10298
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-283a"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/coin-2.png
200 OK 8.6 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/coin-2.png
IP
File type PNG image data, 241 x 246, 8-bit colormap, non-interlaced\012- data
Hash 5134edd9d7162628ad9562e6dc1a55d8
15285f89d315dfdba3c9960c2086a3799e8fac88
a4bc27c0255d75a0b4698e759bcb5d588baba8e0155fe8932ed366a77b83bb60
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/coin-2.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:22 GMT
Content-Type: image/png
Content-Length: 8607
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-219f"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/coin-3.png
200 OK 7.6 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/coin-3.png
IP
File type PNG image data, 211 x 163, 8-bit colormap, non-interlaced\012- data
Hash 519b152b42a1201fef98118755beccb0
b89ffc3dff25cbfbe5f9c609569f44d0a38dbaee
2351f1c3d1813e20883cb7fde8c9d97183190757bca38fff115fe8d85de08ab6
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/coin-3.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 7605
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1db5"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/spin/liana.png
200 OK 7.8 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/spin/liana.png
IP
File type PNG image data, 105 x 343, 8-bit colormap, non-interlaced\012- data
Hash 4ad275d717edef82cbc356b3e95fc0e4
c37386ff645f673603f2d9b8f5378524c90bc27b
878b6d0d288cdbdcd04111e01ec94d512fa7fff1350448959d0e9b38f89af320
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/spin/liana.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 7757
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1e4d"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-g-1.png
200 OK 4.9 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-g-1.png
IP
File type PNG image data, 119 x 65, 8-bit colormap, non-interlaced\012- data
Hash 95b9419ae8b19b559826abb887325d92
9b9da7fa77db4f7748c1693ff510c12ce66faf7e
648b7a9703aecfe2f5cf8d4cd15fbc55b3bfc6ad3a5e223d7f6f88ba30e95dca
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/gem-g-1.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 4912
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1330"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/flags/ua.svg
200 OK 181 B URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/flags/ua.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash 1975696585b673672d8aa5fabf8b47d3
6ed8fa76c35eb798371fc287145f422c778c83f9
b8159e2fdc30d1e3a156fa90c4876d367cbcab1c82345099ac39790d046ceb85
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/flags/ua.svg HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/svg+xml
Content-Length: 181
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-b5"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-g-2.png
200 OK 7.0 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_fly/gem-g-2.png
IP
File type PNG image data, 100 x 110, 8-bit colormap, non-interlaced\012- data
Hash 510cdb2a1f63da0e338c66d09e4e7d18
b11833947fc9092cbc0aaf54fdf204fefe4f8bfc
21634d60698111f233d8e47c69cb866f064d28b6d8d297b645e4b0f827284933
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_fly/gem-g-2.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 6969
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-1b39"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/spin/spin_bg.png
200 OK 35 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/spin/spin_bg.png
IP
File type PNG image data, 292 x 187, 8-bit colormap, non-interlaced\012- data
Hash f7b6c475d20f1c88dc41b0c73a694e5c
af0320558fa54e8409493ffc14b334df07ef9073
b394f1c55330e01a8993e915d222e2ef896852c241c3334a6ccff8cfe2a6d5d9
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/spin/spin_bg.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 35053
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-88ed"
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sat, 03 Sep 2022 06:38:16 GMT
Expires: Sat, 03 Sep 2022 06:38:20 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1xrxk3PFJYEz1NmHbVTEdidCyWiILVswOEXXeq8zFV4xO5ACaEYKTQ==
Age: 2947
znkgk0trsntgjn.live/wheel_joker/public/img/check.png
200 OK 175 B URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/check.png
IP
File type PNG image data, 9 x 8, 4-bit colormap, non-interlaced\012- data
Hash c78afb38bf4f1e26195038e19c8d63cd
be406efb567e8955d1101cf6f0528009d2dcc9bd
7b921be28d29702999bce18b5be6f41f0a9dbf0afec8efc47d14d00bfc464e83
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/check.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 175
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-af"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/modal_bg.png
200 OK 43 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/modal_bg.png
IP
File type PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced\012- data
Hash e9ab1b44171d0a93a500853b5dd4c913
d018282edeab3cf6a3df07b5b0ddce22a4f5786d
f59b90dd61b8da052e69679923390498642d6ea18b393a84617759e7cc54c1ee
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/modal_bg.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 42846
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-a75e"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/popup_bg.png
200 OK 132 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/popup_bg.png
IP
File type PNG image data, 525 x 550, 8-bit colormap, non-interlaced\012- data
Size 132 kB (132126 bytes)
Hash 3a95bdf04c189807727d0eca78fdfc6c
b257340b53376becc997e5b0569c6a9e278bb7e4
0f1a36bcadcab73276603705d20b68edd8526f35870f577997d3cfc0644f047e
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/popup_bg.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/public/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 132126
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-2041e"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/bg_first_plane.png
200 OK 65 kB URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/bg_first_plane.png
IP
File type PNG image data, 768 x 237, 8-bit colormap, non-interlaced\012- data
Hash 37281cf330eb114fbd3d288d71438eed
636a592d85ee8288f20e019091470fb4f2da2f8c
073a3d0fe05314195c25a21ab50f84094abe0bd73bc60c567aabdc9daf16ce77
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/bg_first_plane.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 64591
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-fc4f"
Accept-Ranges: bytes
znkgk0trsntgjn.live/wheel_joker/public/img/favicon.png
200 OK 992 B URL HTTP/1.1 znkgk0trsntgjn.live/wheel_joker/public/img/favicon.png
IP
File type PNG image data, 30 x 31, 8-bit colormap, non-interlaced\012- data
Hash 177b5c8a07c8d5c1114c86a7313df869
d35134271bdd188c48ef98524092213e4026e6b8
97373695b3f1216daf51420bcf4605164ba1a57e94ab45b0aec0572cf84fdffb
Analyzer Verdict Alert quad9 Sinkholed
GET /wheel_joker/public/img/favicon.png HTTP/1.1
Host: znkgk0trsntgjn.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/wheel_joker/?source=8771&apclick=71adde33-96fd-dbcf-ffdd-0183001d0178&apsource=8771&click_id=71adde33-96fd-dbcf-ffdd-0183001d0178&webmaster=15848&offer_id=34&country=us&city=uca&subid2=874&utm_source=partners&utm_medium=cpa&utm_campaign=15848&subid1=631275e28acc2000018fc5e2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Sat, 03 Sep 2022 07:27:23 GMT
Content-Type: image/png
Content-Length: 992
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 12:01:20 GMT
ETag: "61adfb90-3e0"
Accept-Ranges: bytes
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sat, 03 Sep 2022 06:41:12 GMT
expires: Sat, 03 Sep 2022 08:41:12 GMT
cache-control: public, max-age=7200
age: 2771
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j96&a=68902878&t=pageview&_s=1&dl=https%3A%2F%2Fznkgk0trsntgjn.live%2Fwheel_joker%2F%3Fsource%3D8771%26apclick%3D71adde33-96fd-dbcf-ffdd-0183001d0178%26apsource%3D8771%26click_id%3D71adde33-96fd-dbcf-ffdd-0183001d0178%26webmaster%3D15848%26offer_id%3D34%26country%3Dus%26city%3Duca%26subid2%3D874%26utm_source%3Dpartners%26utm_medium%3Dcpa%26utm_campaign%3D15848%26subid1%3D631275e28acc2000018fc5e2&ul=en-us&de=UTF-8&dt=%D0%97%D0%90%D0%91%D0%98%D0%A0%D0%90%D0%99%2010%20%D0%B4%D0%BD%D0%B5%D0%B9%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%B3%D1%80%D1%8B&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAAC~&jid=313900442&gjid=516671002&cid=78347680.1662190041&tid=UA-130009488-1&_gid=834824064.1662190041&_r=1>m=2wg8v0K9F87TG&cd1=15848&z=2093679195
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&a=68902878&t=pageview&_s=1&dl=https%3A%2F%2Fznkgk0trsntgjn.live%2Fwheel_joker%2F%3Fsource%3D8771%26apclick%3D71adde33-96fd-dbcf-ffdd-0183001d0178%26apsource%3D8771%26click_id%3D71adde33-96fd-dbcf-ffdd-0183001d0178%26webmaster%3D15848%26offer_id%3D34%26country%3Dus%26city%3Duca%26subid2%3D874%26utm_source%3Dpartners%26utm_medium%3Dcpa%26utm_campaign%3D15848%26subid1%3D631275e28acc2000018fc5e2&ul=en-us&de=UTF-8&dt=%D0%97%D0%90%D0%91%D0%98%D0%A0%D0%90%D0%99%2010%20%D0%B4%D0%BD%D0%B5%D0%B9%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%B3%D1%80%D1%8B&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAAC~&jid=313900442&gjid=516671002&cid=78347680.1662190041&tid=UA-130009488-1&_gid=834824064.1662190041&_r=1>m=2wg8v0K9F87TG&cd1=15848&z=2093679195
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j96&a=68902878&t=pageview&_s=1&dl=https%3A%2F%2Fznkgk0trsntgjn.live%2Fwheel_joker%2F%3Fsource%3D8771%26apclick%3D71adde33-96fd-dbcf-ffdd-0183001d0178%26apsource%3D8771%26click_id%3D71adde33-96fd-dbcf-ffdd-0183001d0178%26webmaster%3D15848%26offer_id%3D34%26country%3Dus%26city%3Duca%26subid2%3D874%26utm_source%3Dpartners%26utm_medium%3Dcpa%26utm_campaign%3D15848%26subid1%3D631275e28acc2000018fc5e2&ul=en-us&de=UTF-8&dt=%D0%97%D0%90%D0%91%D0%98%D0%A0%D0%90%D0%99%2010%20%D0%B4%D0%BD%D0%B5%D0%B9%20%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%B3%D1%80%D1%8B&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAAC~&jid=313900442&gjid=516671002&cid=78347680.1662190041&tid=UA-130009488-1&_gid=834824064.1662190041&_r=1>m=2wg8v0K9F87TG&cd1=15848&z=2093679195 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://znkgk0trsntgjn.live
Connection: keep-alive
Referer: https://znkgk0trsntgjn.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://znkgk0trsntgjn.live
date: Sat, 03 Sep 2022 07:27:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 21daf45cdda2eb462873226bb5c1f0fb
4d4621bbf1461f35f7e536c1dbd9de71978ffa23
8164c742d013bdc2836cac1167acfe482547347ab6a1daefa15475f694dae057
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4073
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 07:27:23 GMT
Last-Modified: Sat, 03 Sep 2022 06:19:30 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: htabCWYRwbTz69uYZZK/QA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: G6zQUp0Bv919UMhcDrx7AMe8xpw=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17092
Expires: Sat, 03 Sep 2022 12:12:17 GMT
Date: Sat, 03 Sep 2022 07:27:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17092
Expires: Sat, 03 Sep 2022 12:12:17 GMT
Date: Sat, 03 Sep 2022 07:27:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17092
Expires: Sat, 03 Sep 2022 12:12:17 GMT
Date: Sat, 03 Sep 2022 07:27:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17092
Expires: Sat, 03 Sep 2022 12:12:17 GMT
Date: Sat, 03 Sep 2022 07:27:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17092
Expires: Sat, 03 Sep 2022 12:12:17 GMT
Date: Sat, 03 Sep 2022 07:27:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c199f7fc2a2857dec134bfdb2673e28c
af3989072b658e2de119d006ae4ca1703468913d
e57411ba0221f6ffa7baf7c374ec790959a66d6a683fad40883ef01cf67e35c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6976
x-amzn-requestid: da379546-9525-4e13-b9f0-a6446839df66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X2eNeG7kIAMF4-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63127722-37399f67565b06e7111095cd;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 21:35:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: alcmiW5Cb3Z96RJNXfz4F54HNERbyV71Q8hqVuNEOTUc48kItzlfHQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:49:53 GMT
age: 34652
etag: "af3989072b658e2de119d006ae4ca1703468913d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1acc690-bb1d-4455-a994-a5da9489094c.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1acc690-bb1d-4455-a994-a5da9489094c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 47663af0974e05b0971805a7414415fb
a2d2d69a9d03830d2dda8ad9eccfc0a7f0c6ba80
ad21b7a7167622d83fce7de1bcb44b00aa03c8e125acc1f493c5d52a5ff9044c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa1acc690-bb1d-4455-a994-a5da9489094c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8118
x-amzn-requestid: aa382bf8-0a23-4d5f-bc4a-4e7d46b9cf47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XguwMF6wIAMFkeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6309c4cd-7aaa10221c8b868d573aa0e8;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 07:16:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: S92hRetrCT5GDno0yTYGeWAwg-CRyTyvc3cJ7MXmXUr98pxYDCqjVQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:52:01 GMT
age: 34524
etag: "a2d2d69a9d03830d2dda8ad9eccfc0a7f0c6ba80"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dce7ca4-6ed1-4f00-8943-1ea59bc2cfd0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dce7ca4-6ed1-4f00-8943-1ea59bc2cfd0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 940d722cca434f3267ad6a1567b92e7b
8f8d5827588201a2b6aa883cbf812b0db2318df2
33c16b50e7c317df2b91def5625e8e39c8c2ecc75054ee40f82d4b22c80eb831
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dce7ca4-6ed1-4f00-8943-1ea59bc2cfd0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11776
x-amzn-requestid: 59dcda55-4c16-4842-828d-2588c43178c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqdN-FzkIAMFy4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630da8bf-37b930cb3e54dfa21883ead4;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 06:05:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lpnEYXkNqGxPiVSToeatrE1dQhERF7CIEs7nYZEJWJbAsL3dqs9SaA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:25:19 GMT
age: 36126
etag: "8f8d5827588201a2b6aa883cbf812b0db2318df2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68896368-9321-46bd-8689-6fc6047037c0.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68896368-9321-46bd-8689-6fc6047037c0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 31b0175d4161dd1d2eead5887e0b2f3b
441b9928a5a383e636ff1fb2a9ec72d52ee2996b
6d15e8d5a4e6a25971007741c689b705b35b437f39dfeebdf80bedcc9efa461e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68896368-9321-46bd-8689-6fc6047037c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6683
x-amzn-requestid: 0a8f3818-3172-4b9b-9a27-281d46486005
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XwpkjEuBIAMFnVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631022e9-5c1835b07f5d49b449ea861c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 03:11:37 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Jq27qx3Cj6-ScdDTS8dzaUdalDbivJWo0rc9AbqnjWt6XVOFHA5opA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 04:09:12 GMT
age: 11893
etag: "441b9928a5a383e636ff1fb2a9ec72d52ee2996b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9669117-bdb7-4eca-9f0c-900e888a9a98.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9669117-bdb7-4eca-9f0c-900e888a9a98.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9ae49d397bc8300ce0eceda8175a3ad
087b7d14d84ebb179126c9dcd8964d22f24f30ab
b9daa2fc390a97a4bd622dbdec7fe0fff7e6527ffb844a46b9b87b2bd6e0f006
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9669117-bdb7-4eca-9f0c-900e888a9a98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13241
x-amzn-requestid: 80083a05-9884-48f8-983b-d4132d7c8a0c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X2eMHFgPIAMF9qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312771a-16fd2f06541cb4bc027f153f;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sMzgVvKpAdIumqHzRtYOOYP1Yjy8oQzsn6PIo50kE_3NOlrdsCaohA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:49:44 GMT
age: 34661
etag: "087b7d14d84ebb179126c9dcd8964d22f24f30ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1a25fee-f3d6-472f-81bc-e6c0a5fb3126.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1a25fee-f3d6-472f-81bc-e6c0a5fb3126.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 68ab3b487c83fa2b50f774f1ed7e2e00
761c970aa19a87625a60a80f74dc9ae9d8c54ab0
4c483c7ad3b7f20a4566daf558fbd308158068accbbaca38089da192c2bc722c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1a25fee-f3d6-472f-81bc-e6c0a5fb3126.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6629
x-amzn-requestid: d4aa1811-d366-4870-af20-34f1c728e68c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XaHqZENEoAMFk3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63071fdb-00ecbcd53d468e0062e86aa0;Sampled=0
x-amzn-remapped-date: Thu, 25 Aug 2022 07:08:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -HvQYlPbQydm9pFKwy0uRyLX_Wffo0iorzm7hlIonbnqdcu3OwHFkQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:52:08 GMT
age: 34517
etag: "761c970aa19a87625a60a80f74dc9ae9d8c54ab0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
193.148.244.59
93.184.220.29
23.36.76.226