Overview

URLofficialwinner.xyz/1/prizewheel/cash/trcash/index.html
IP 54.230.111.99 (United States)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-04 15:07:19 UTC
StatusLoading report..
IDS alerts0
Blocklist alert5
urlquery alerts No alerts detected
Tags None

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-04 2 officialwinner.xyz/1/prizewheel/cash/trcash/index.html Phishing
2022-12-04 2 officialwinner.xyz/1/prizewheel/cash/trcash/css/app.css?id=c588c17324f2be0e0ec9 Phishing
2022-12-04 2 officialwinner.xyz/1/prizewheel/cash/trcash/js/landers/prizewheel-fb/app.js (...) Phishing
2022-12-04 2 officialwinner.xyz/1/prizewheel/cash/trcash/img/fb-like.svg Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-04 2 desekansr.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 54.230.111.99
Date UQ / IDS / BL URL IP
2023-01-26 23:10:33 +0000 0 - 2 - 0 update.studio3t.com/win-x64/studio-3t-x64.exe 54.230.111.99
2023-01-19 19:08:16 +0000 0 - 0 - 29 www.metamaskbom.com/ 54.230.111.99
2023-01-16 06:09:10 +0000 0 - 0 - 1 officialwinner.xyz/1/prizewheel/cash/mycash/i (...) 54.230.111.99
2023-01-15 14:18:23 +0000 0 - 0 - 4 officialwinner.xyz/1/prizewheel/cash/pkcash/i (...) 54.230.111.99
2023-01-15 14:08:14 +0000 1 - 0 - 1 officialwinner.xyz/1/prizewheel/iphone12/ar-d (...) 54.230.111.99


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-01-27 05:40:17 +0000 0 - 6 - 0 www.geegeeauto.buzz/ 199.59.243.222
2023-01-27 05:35:57 +0000 0 - 1 - 0 ct-wk.xyz/ 75.2.59.147
2023-01-27 05:33:39 +0000 0 - 10 - 0 opentracker.xyz/announce?info_hash=%C9]%8DEX% (...) 3.64.163.50
2023-01-27 05:33:19 +0000 0 - 5 - 2 776a-88-241-42-121.ngrok.io/ 3.14.182.203
2023-01-27 05:28:27 +0000 0 - 0 - 2 eflwhefwehli.xyz/ 76.223.15.82


Last 5 reports on domain: officialwinner.xyz
Date UQ / IDS / BL URL IP
2023-01-20 21:14:39 +0000 0 - 0 - 1 officialwinner.xyz/1/prizewheel/cash/aucash/i (...) 69.175.50.100
2023-01-16 06:09:10 +0000 0 - 0 - 1 officialwinner.xyz/1/prizewheel/cash/mycash/i (...) 54.230.111.99
2023-01-16 04:07:39 +0000 0 - 0 - 1 officialwinner.xyz/1/prizewheel/iphone13/pt/i (...) 54.230.111.9
2023-01-15 14:18:23 +0000 0 - 0 - 4 officialwinner.xyz/1/prizewheel/cash/pkcash/i (...) 54.230.111.99
2023-01-15 14:08:14 +0000 1 - 0 - 1 officialwinner.xyz/1/prizewheel/iphone12/ar-d (...) 54.230.111.99


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-27 00:55:43 +0000 0 - 1 - 1 track.buller-matuma.com/c0623fdc-b554-4ca2-8a (...) 18.195.128.171
2023-01-25 07:17:27 +0000 0 - 0 - 7 myonlygift.xyz/1/prizewheel/cash/trcash/index.html 54.230.111.70
2023-01-22 02:55:16 +0000 0 - 0 - 1 track.buller-matuma.com/f3455cd7-fe40-4556-86 (...) 18.195.128.171
2023-01-21 21:05:33 +0000 0 - 0 - 5 prizepicker.xyz/1/prizewheel/cash/trcash/inde (...) 54.230.111.105
2023-01-19 06:00:32 +0000 0 - 1 - 1 track.buller-matuma.com/c0623fdc-b554-4ca2-8a (...) 18.195.128.171

JavaScript

Executed Scripts (11)

Executed Evals (1)
#1 JavaScript::Eval (size: 80) - SHA256: 96ed9a2af4ea2a854fa1e9d3ccab2fdc7557e6c14e93b59043c67530df9571e6
(() => {
    const a = async
    function name() {};
    window['t6xfpv1oh7a'] = true;
})()

Executed Writes (2)
#1 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
#2 JavaScript::Write (size: 68) - SHA256: fa48e77f8d84201b889071f722b3c12f0ff65d581f746a780cd66e6d45606a2f
< a href = "https:///click"
class = "step__button" > �d� l� Kullan < /a>


HTTP Transactions (39)


Request Response
                                        
                                            GET /1/prizewheel/cash/trcash/index.html HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 04 Dec 2022 11:27:56 GMT
ETag: W/"8e75fdbf5442275699fa56274e800335"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1PD-SBUF6OHHLt7sCWOYx9MCZY2ot19F-ZIXqJYF1P6tY1RbBMXuew==
Age: 13153


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1215)
Size:   4161
Md5:    c8aab23b66e14c72effdc85a783a2b2e
Sha1:   38a1b18cd8068e92a2f64f216320be50ae445d4d
Sha256: 9751bab9968aaa234a16fea74c4dedeae656fd4e43d9fa70e5b18e164af0d365

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9695
Expires: Sun, 04 Dec 2022 17:48:43 GMT
Date: Sun, 04 Dec 2022 15:07:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1516
Cache-Control: 'max-age=158059'
Date: Sun, 04 Dec 2022 15:07:08 GMT
Last-Modified: Sun, 04 Dec 2022 14:41:52 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17202
Expires: Sun, 04 Dec 2022 19:53:50 GMT
Date: Sun, 04 Dec 2022 15:07:08 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 14:20:07 GMT
cache-control: public,max-age=3600
age: 2821
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: ZAY5tl3OXiKdhdCSzU6VfXMfbyD5DKIUt2zd1OWt7tmoIQPidFJPOf9GlYMEnhLslFuWLVydXUaW4SlFVFvMGQ==
x-amz-request-id: XR53846W1CWHM1CC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 14:47:01 GMT
age: 1207
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /1/prizewheel/cash/trcash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 04 Dec 2022 11:27:57 GMT
ETag: W/"cd41123a11e97e0f2444b57d180631a0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Jtt5rLst_7jrkaLlubKwHvpOIywoXQyDbxp62kduYfTL-PA0EPcGYQ==
Age: 13152


--- Additional Info ---
Magic:  ASCII text, with very long lines (3495), with no line terminators
Size:   1095
Md5:    ba8a1435ff223b2909706f678310def7
Sha1:   6d945ed87239f4b1544ee080873e3aacd70ac653
Sha256: cafe68f02f3d4331a25a26a8419497011c8d18b583064f9ad7eacc167a5f5081
                                        
                                            GET /1/prizewheel/cash/trcash/css/app.css?id=c588c17324f2be0e0ec9 HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 33
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:27:57 GMT
ETag: "c588c17324f2be0e0ec90a18f39e7d7c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: k-cwNuUyXuYA6xWg8Ri5xsXm6PMMLKOXX2sVL4lGAUu9dFYhT6zVLg==
Age: 13152


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   33
Md5:    c588c17324f2be0e0ec90a18f39e7d7c
Sha1:   69d360eddd15f527aac7f7e610346517732b7770
Sha256: b83e8830b6b2f1253a78f90191cf1087e8fd7638831fd4c1376a7a6029297240

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 04 Dec 2022 15:07:08 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /1/prizewheel/cash/trcash/js/app.js?id=15b1bae461854d516179 HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 977
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:27:57 GMT
ETag: "15b1bae461854d516179a34a8c9b5f08"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OWoJESkaNqIErJuRteDjAmr-KrV19Lgm8oNWdP9NVLWppAuSiSVGYQ==
Age: 13152


--- Additional Info ---
Magic:  ASCII text, with very long lines (977), with no line terminators
Size:   977
Md5:    15b1bae461854d516179a34a8c9b5f08
Sha1:   330c1d191253fe07c5fe6b5af37872408f2e5904
Sha256: 1bd25e467ea078265aee433e0cf9732a7e127514304634590a2de17fb2330896
                                        
                                            GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/loader.gif HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 5083
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:27:57 GMT
ETag: "ed786659a534e0d183c09a90c50abc9d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FEr9Uplb0lMW5mCmcHsav9ukkOO303ROLAzYTNSDDcszc5OMibiHZg==
Age: 13152


--- Additional Info ---
Magic:  GIF image data, version 89a, 50 x 50\012- data
Size:   5083
Md5:    ed786659a534e0d183c09a90c50abc9d
Sha1:   a6c3d90bfaa86a7cda490bc5d04c8939c31a414e
Sha256: cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97
                                        
                                            GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/notification.png HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 449
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:27:57 GMT
ETag: "bd5203f2cc9e7a9125e4575e029541b0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CjmoozY_Ld_NBVI5Ua1gbVC1AYx7Kwjm8jKw1sSmWdB7MZHvgfVYIg==
Age: 13152


--- Additional Info ---
Magic:  PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data
Size:   449
Md5:    bd5203f2cc9e7a9125e4575e029541b0
Sha1:   9fa565ab2f4b55da4735b79e529562252b3c9afe
Sha256: db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f
                                        
                                            GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 32496
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:27:58 GMT
ETag: "d4655cba21d806e849eed4e4119fbe1a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KtTsEzGjIhu19qsLQ4sDzU7ThCH6ngpBPEiYZvGoptCBdT0fIP1pEA==
Age: 13151


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3\012- data
Size:   32496
Md5:    d4655cba21d806e849eed4e4119fbe1a
Sha1:   6453039d85005643e9d65074ca022f63b5d47cdd
Sha256: 90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7
                                        
                                            GET /1/prizewheel/cash/trcash/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 20297
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:27:57 GMT
ETag: "21c566d339878bab58101cee37adbce8"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4JijMVIonJlr-HoorbPx19vN62lYxdihxy4up2xnZqQegGxyPwsjYg==
Age: 13152


--- Additional Info ---
Magic:  PNG image data, 250 x 179, 8-bit colormap, non-interlaced\012- data
Size:   20297
Md5:    21c566d339878bab58101cee37adbce8
Sha1:   741159c0dd360a904ffcb63057e165d57e8fedd4
Sha256: 18f266f89565ca902fbf9c6dca8abff01cf0e29e1eafbcf6e93a832126d1b3b2
                                        
                                            GET /1/prizewheel/cash/trcash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6 HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 04 Dec 2022 11:27:57 GMT
ETag: W/"cdf97653c213f02233f50a1ec975633c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LCa-oM8gVqIxiWatLcwwsX3LYsoja1r2d0gePubgAsMQd8wyaM_5Wg==
Age: 13152


--- Additional Info ---
Magic:  ASCII text, with very long lines (65475)
Size:   52570
Md5:    754d909ee48fbc13967dc6a92a50f2b5
Sha1:   9db6fefead1ffa5a73112b1f0c5e43d3122b3026
Sha256: 3f947d346a2bf83e521b39b8b12c179083538ee4becdc4be1680357929c4bd1a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js HTTP/1.1 
Host: desekansr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/

search
                                         139.45.197.250
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sun, 04 Dec 2022 15:07:09 GMT
Last-Modified: Thu, 01 Dec 2022 15:42:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6388cb77-9a87"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (39559), with no line terminators
Size:   13926
Md5:    b0248b30e57fdd1d6f2d1ca431d7cea1
Sha1:   8db557f8498245d59e56fbea78b2256c316e73f8
Sha256: e0d17f3c9ed344a38fd3526fea8b7221afe6b7c98962141ce0a78345a7424a68

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/female/3@0.25x.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 2506
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 09:26:59 GMT
ETag: "e69e56799051d24a67414a67301ac984"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QHJPVyXkl8FLoIPhj3TrpMoXOvOyuF99vjLuRtHrYVERnRc3uYrt9A==
Age: 20411


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size:   2506
Md5:    e69e56799051d24a67414a67301ac984
Sha1:   7d7db0281213342c25abf9e08937e38c7d1e8449
Sha256: cff50b269e3afdcf620ba9a8f6d3ac55b03a953136f3148d1b3296798bf57210
                                        
                                            GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 3370
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:27:58 GMT
ETag: "dc484e0043b5ff6191b1880c8779863c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Uipi7e-qSIMOc9rhSYZn03tXz6_kgq_a9Qw6eR1jLB4zw5Wo06LcvQ==
Age: 13152


--- Additional Info ---
Magic:  PNG image data, 1002 x 1002, 4-bit colormap, non-interlaced\012- data
Size:   3370
Md5:    dc484e0043b5ff6191b1880c8779863c
Sha1:   a5b67e3dff3dea3940eed090431aecbb36611b1d
Sha256: 30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6
                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/male/9@0.25x.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 2224
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:28:29 GMT
ETag: "444a95e7661a07d48ae8a2b7d67792be"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HxTMxcvxT63HmR4zhF2URoq4GS_7splmKlC9NL6tfhvG7gd4BPjytQ==
Age: 13121


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size:   2224
Md5:    444a95e7661a07d48ae8a2b7d67792be
Sha1:   e31aa744a72a17d6a3e04cd0e6f9a9fc59a47b59
Sha256: d815f00761793a93ef88b73ea6451d9300a052ce64f454d30f9446af3bd9ccda
                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/female/6@0.25x.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 2950
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:28:29 GMT
ETag: "5f6bc62e6e66a94b4ce9b971a798ceff"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sJVHLozm_bolQ7-W13NpXAk4ZIhvmwweyFPfaaHfhzq3q7dKA-qSzw==
Age: 13121


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size:   2950
Md5:    5f6bc62e6e66a94b4ce9b971a798ceff
Sha1:   05faaed9dbd1a5462485d4deeed888312a3b4973
Sha256: cfa55f5831710c40e2429ec2528b080fb2e6b11b560abfa8eaa1710b63770af3
                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/female/5@0.25x.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 2787
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:28:29 GMT
ETag: "6063e3355d6e928b55810c359ee1d382"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8VIccE5woju0evtPaLXx7OMGkqkfo5ngJz77yaQuIrJOMEkmpbO0bQ==
Age: 13121


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size:   2787
Md5:    6063e3355d6e928b55810c359ee1d382
Sha1:   a6a19cb61b8a8f9ed538a6467a7a41ed85fc01ad
Sha256: 9db1c16bd8c27942b3d83cff9d81462ced2b7827ab45fe53ff3fcec32ed138d9
                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/male/3@0.25x.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 3301
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 02:28:55 GMT
ETag: "49f1b40f2ed2ef127cb64293ae8b1524"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jWMeiNQL9iFtq5L6IirlN5RLzLVlT3dXWTkcr-6Pcndb1bn_A1DzEA==
Age: 45495


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size:   3301
Md5:    49f1b40f2ed2ef127cb64293ae8b1524
Sha1:   7939aacf51d0ba9b4358cb17ef40eb91fa31e27b
Sha256: c5e6dbfaac2e982618aa4ea88a1785ca965b57f3149551f194cdaae2d8406a53
                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/male/10@0.25x.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 3175
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:27:58 GMT
ETag: "f8002e02aac0ac1bb22d2c80f36ebf15"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3LpIzoS7c0p46nyY6gFVwbqbVvYhoOkSzs5OgsTGhO2lgzsw4rflcQ==
Age: 13152


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size:   3175
Md5:    f8002e02aac0ac1bb22d2c80f36ebf15
Sha1:   bf277a8747caf561b91a25860e772cf0f1a834a5
Sha256: 0e98e32d27f59276dc137de153e32c28220a635701413565a4646dc8361fd94c
                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/female/1@0.25x.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 2853
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:28:29 GMT
ETag: "4ccf612375cb7df45e271ecd2983281e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sGZ5Xbg9AegN8jsZ52csUZLqKXDh-OFANbDRyLUVJ5_qSk7TQU2dGQ==
Age: 13121


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size:   2853
Md5:    4ccf612375cb7df45e271ecd2983281e
Sha1:   db4bc5414c30c39531e38c9a3f34b087cd68b4b6
Sha256: 75f237c0722d2dd3ef7d7e4bad43a70ac57bad90c81b9cb8b9c9b445c0a76a1b
                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/male/2@0.25x.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 2258
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:28:29 GMT
ETag: "07ee3d87dba4f97110c83432fcc8f3f6"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jJRKl7nbqLPr94Et9yhsGfUUxVhdXRffXviN7GbNx4rPzmh7b96flw==
Age: 13121


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size:   2258
Md5:    07ee3d87dba4f97110c83432fcc8f3f6
Sha1:   80f21d2258991eaecca028683f58b16019bf9deb
Sha256: 50479fd6ff7c08b64aa01f0a415bba20d8ddd79a43becae604955e9086098cff
                                        
                                            GET /1/prizewheel/cash/trcash/img/fb-like.svg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 04 Dec 2022 11:27:58 GMT
ETag: W/"765203989756e91925e8f947e660b644"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 61Ian3M2kOy_o18wc8UyViF01zJtbygeXmQ6u_GC1L0JU_C17J41vg==
Age: 13152


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4627), with no line terminators
Size:   2064
Md5:    6cf8d9808a9896bbdebf2695f527a2da
Sha1:   569fc54492f5fdfe334a995f237a13fcb101796c
Sha256: ab89135d104824678836f96584c3010e40f976d5b165fbd0a4a5b4a7aa367ca6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /1/prizewheel/cash/trcash/img/prizes/iphone-12-pro-max/proof.jpg HTTP/1.1 
Host: officialwinner.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

search
                                         54.230.111.99
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Content-Length: 44544
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 04 Dec 2022 11:28:29 GMT
ETag: "caf91f09d8a684d84b78e12563d960f9"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qjz2UzG9VZf8VsjRbFo4xHkSBVH07bBNho6Odla_I1nZ9R9j8aVNSg==
Age: 13121


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x394, components 3\012- data
Size:   44544
Md5:    caf91f09d8a684d84b78e12563d960f9
Sha1:   811c30bd1737647c893cba21aa19eb55b74090ef
Sha256: b45fb8f8d4215fe20bc08946b5d492eba8974ebc31389c0e876ab02eaf159d6d
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 14:08:58 GMT
cache-control: public,max-age=3600
age: 3491
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1500
Cache-Control: max-age=152682
Date: Sun, 04 Dec 2022 15:07:09 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 09:31:51 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dyfqoPcB8Eq0gemmP3Wl0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.13.173.34
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WIVY9mVAa56LRQyg9c2AfGTc6BM=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4658
Expires: Sun, 04 Dec 2022 16:24:49 GMT
Date: Sun, 04 Dec 2022 15:07:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4658
Expires: Sun, 04 Dec 2022 16:24:49 GMT
Date: Sun, 04 Dec 2022 15:07:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4658
Expires: Sun, 04 Dec 2022 16:24:49 GMT
Date: Sun, 04 Dec 2022 15:07:11 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6UQ_BhPmpVpe9w6gsExB-EpNq_syeCCK6fr4Y1FFK1jDJh_n1Sd0Eg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:52:47 GMT
age: 62064
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8315
Md5:    db1701b7b9d161a0c935bb6e10b17893
Sha1:   22a8c4bd58c729c1abcf794466e8f3231dfb034b
Sha256: b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kRs3oBWnSs5asyPdvz6kkooy7pqm2Yr8R_2x8EXCVn3dBz_aEJurRQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:26:41 GMT
age: 27630
etag: "1d702df3a64258628f4124eafd580695f2d350af"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   16143
Md5:    14dcca2a9c4792d835ee709bcd947402
Sha1:   1d702df3a64258628f4124eafd580695f2d350af
Sha256: da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 62590
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4666
Md5:    c01fe1cccdb3b672bbade6d98217ffe9
Sha1:   a9a529dc9894827f6243a1bf57f81caa4fe88fc2
Sha256: c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7503
x-amzn-requestid: a4120308-c51e-4cff-99c2-90e86018b05d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgZjCGkVIAMFpsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a2e0-6fdf362a6d32449239476155;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dy619jlSTwCjwDhGuLmwTMcmuYj1Kg2oLA7xORyAYX8IHWimhNo6pw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:16:07 GMT
age: 28264
etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7503
Md5:    c1a6f4805f59db44f9d3520d88701a58
Sha1:   6a0258e8c97ce09f1723382c8a16d9682b7dc50c
Sha256: ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:52:38 GMT
age: 62073
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5681
Md5:    43309032a892c486f9985ef520df696e
Sha1:   36f4682ca6a33ff80ee02129c77e6f27e996ede0
Sha256: 24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:06 GMT
age: 62405
etag: "8637105f41058bc0d2b259d462b560881928adb6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10431
Md5:    2636f91bb8fa4d9bb7bef114c248a9ae
Sha1:   8637105f41058bc0d2b259d462b560881928adb6
Sha256: 3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7