urlquery - report: officialwinner.xyz/1/prizewheel/cash/trcash/index.html

Scan Date	Severity	Indicator	Comment
2022-12-04	2	officialwinner.xyz/1/prizewheel/cash/trcash/index.html	Phishing
2022-12-04	2	officialwinner.xyz/1/prizewheel/cash/trcash/css/app.css?id=c588c17324f2be0e0ec9	Phishing
2022-12-04	2	officialwinner.xyz/1/prizewheel/cash/trcash/js/landers/prizewheel-fb/app.js (...)	Phishing
2022-12-04	2	officialwinner.xyz/1/prizewheel/cash/trcash/img/fb-like.svg	Phishing

Scan Date	Severity	Indicator	Comment
2022-12-04	2	desekansr.com	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-01-26 23:10:33 +0000	0 - 2 - 0	update.studio3t.com/win-x64/studio-3t-x64.exe	54.230.111.99
2023-01-19 19:08:16 +0000	0 - 0 - 29	www.metamaskbom.com/	54.230.111.99
2023-01-16 06:09:10 +0000	0 - 0 - 1	officialwinner.xyz/1/prizewheel/cash/mycash/i (...)	54.230.111.99
2023-01-15 14:18:23 +0000	0 - 0 - 4	officialwinner.xyz/1/prizewheel/cash/pkcash/i (...)	54.230.111.99
2023-01-15 14:08:14 +0000	1 - 0 - 1	officialwinner.xyz/1/prizewheel/iphone12/ar-d (...)	54.230.111.99

Date	UQ / IDS / BL	URL	IP
2023-01-27 05:40:17 +0000	0 - 6 - 0	www.geegeeauto.buzz/	199.59.243.222
2023-01-27 05:35:57 +0000	0 - 1 - 0	ct-wk.xyz/	75.2.59.147
2023-01-27 05:33:39 +0000	0 - 10 - 0	opentracker.xyz/announce?info_hash=%C9]%8DEX% (...)	3.64.163.50
2023-01-27 05:33:19 +0000	0 - 5 - 2	776a-88-241-42-121.ngrok.io/	3.14.182.203
2023-01-27 05:28:27 +0000	0 - 0 - 2	eflwhefwehli.xyz/	76.223.15.82

Date	UQ / IDS / BL	URL	IP
2023-01-20 21:14:39 +0000	0 - 0 - 1	officialwinner.xyz/1/prizewheel/cash/aucash/i (...)	69.175.50.100
2023-01-16 06:09:10 +0000	0 - 0 - 1	officialwinner.xyz/1/prizewheel/cash/mycash/i (...)	54.230.111.99
2023-01-16 04:07:39 +0000	0 - 0 - 1	officialwinner.xyz/1/prizewheel/iphone13/pt/i (...)	54.230.111.9
2023-01-15 14:18:23 +0000	0 - 0 - 4	officialwinner.xyz/1/prizewheel/cash/pkcash/i (...)	54.230.111.99
2023-01-15 14:08:14 +0000	1 - 0 - 1	officialwinner.xyz/1/prizewheel/iphone12/ar-d (...)	54.230.111.99

Date	UQ / IDS / BL	URL	IP
2023-01-27 00:55:43 +0000	0 - 1 - 1	track.buller-matuma.com/c0623fdc-b554-4ca2-8a (...)	18.195.128.171
2023-01-25 07:17:27 +0000	0 - 0 - 7	myonlygift.xyz/1/prizewheel/cash/trcash/index.html	54.230.111.70
2023-01-22 02:55:16 +0000	0 - 0 - 1	track.buller-matuma.com/f3455cd7-fe40-4556-86 (...)	18.195.128.171
2023-01-21 21:05:33 +0000	0 - 0 - 5	prizepicker.xyz/1/prizewheel/cash/trcash/inde (...)	54.230.111.105
2023-01-19 06:00:32 +0000	0 - 1 - 1	track.buller-matuma.com/c0623fdc-b554-4ca2-8a (...)	18.195.128.171

Request	Response
GET /1/prizewheel/cash/trcash/index.html HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: officialwinner.xyz/1/prizewheel/cash/trcash/index.html FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 9751bab9968aaa234a16fea74c4dedeae656fd4e43d9fa70e5b18e164af0d365 54.230.111.99 HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Server: AmazonS3 Content-Encoding: gzip Date: Sun, 04 Dec 2022 11:27:56 GMT ETag: W/"8e75fdbf5442275699fa56274e800335" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: 1PD-SBUF6OHHLt7sCWOYx9MCZY2ot19F-ZIXqJYF1P6tY1RbBMXuew== Age: 13153 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1215) Size: 4161 Md5: c8aab23b66e14c72effdc85a783a2b2e Sha1: 38a1b18cd8068e92a2f64f216320be50ae445d4d Sha256: 9751bab9968aaa234a16fea74c4dedeae656fd4e43d9fa70e5b18e164af0d365 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9695 Expires: Sun, 04 Dec 2022 17:48:43 GMT Date: Sun, 04 Dec 2022 15:07:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cfec3d7283a9b66d2be426ce54d210f3 Sha1: 808c1feb1ba918951d1928c1f6bfc0c253262774 Sha256: 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1516 Cache-Control: 'max-age=158059' Date: Sun, 04 Dec 2022 15:07:08 GMT Last-Modified: Sun, 04 Dec 2022 14:41:52 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fb2c0697c6d9a96a5411dd2952947458 Sha1: 79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4 Sha256: 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17202 Expires: Sun, 04 Dec 2022 19:53:50 GMT Date: Sun, 04 Dec 2022 15:07:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1ea206ac3c440825741687351f8c6e4e Sha1: 2f38dafd8c43dcce2411a0590bc5c02cd6286735 Sha256: 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sun, 04 Dec 2022 14:20:07 GMT cache-control: public,max-age=3600 age: 2821 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: ZAY5tl3OXiKdhdCSzU6VfXMfbyD5DKIUt2zd1OWt7tmoIQPidFJPOf9GlYMEnhLslFuWLVydXUaW4SlFVFvMGQ== x-amz-request-id: XR53846W1CWHM1CC content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sun, 04 Dec 2022 14:47:01 GMT age: 1207 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /1/prizewheel/cash/trcash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/css/landers (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: cafe68f02f3d4331a25a26a8419497011c8d18b583064f9ad7eacc167a5f5081 54.230.111.99 HTTP/1.1 200 OK Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT Server: AmazonS3 Content-Encoding: gzip Date: Sun, 04 Dec 2022 11:27:57 GMT ETag: W/"cd41123a11e97e0f2444b57d180631a0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: Jtt5rLst_7jrkaLlubKwHvpOIywoXQyDbxp62kduYfTL-PA0EPcGYQ== Age: 13152 --- Additional Info --- Magic: ASCII text, with very long lines (3495), with no line terminators Size: 1095 Md5: ba8a1435ff223b2909706f678310def7 Sha1: 6d945ed87239f4b1544ee080873e3aacd70ac653 Sha256: cafe68f02f3d4331a25a26a8419497011c8d18b583064f9ad7eacc167a5f5081
GET /1/prizewheel/cash/trcash/css/app.css?id=c588c17324f2be0e0ec9 HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/css/app.css (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: b83e8830b6b2f1253a78f90191cf1087e8fd7638831fd4c1376a7a6029297240 54.230.111.99 HTTP/1.1 200 OK Content-Type: text/css Content-Length: 33 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:27:57 GMT ETag: "c588c17324f2be0e0ec90a18f39e7d7c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: k-cwNuUyXuYA6xWg8Ri5xsXm6PMMLKOXX2sVL4lGAUu9dFYhT6zVLg== Age: 13152 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 33 Md5: c588c17324f2be0e0ec90a18f39e7d7c Sha1: 69d360eddd15f527aac7f7e610346517732b7770 Sha256: b83e8830b6b2f1253a78f90191cf1087e8fd7638831fd4c1376a7a6029297240 Alerts: Blocklists: - fortinet: Phishing
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sun, 04 Dec 2022 15:07:08 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /1/prizewheel/cash/trcash/js/app.js?id=15b1bae461854d516179 HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/js/app.js?i (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 1bd25e467ea078265aee433e0cf9732a7e127514304634590a2de17fb2330896 54.230.111.99 HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 977 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:27:57 GMT ETag: "15b1bae461854d516179a34a8c9b5f08" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: OWoJESkaNqIErJuRteDjAmr-KrV19Lgm8oNWdP9NVLWppAuSiSVGYQ== Age: 13152 --- Additional Info --- Magic: ASCII text, with very long lines (977), with no line terminators Size: 977 Md5: 15b1bae461854d516179a34a8c9b5f08 Sha1: 330c1d191253fe07c5fe6b5af37872408f2e5904 Sha256: 1bd25e467ea078265aee433e0cf9732a7e127514304634590a2de17fb2330896
GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/loader.gif HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/landers (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 5083 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:27:57 GMT ETag: "ed786659a534e0d183c09a90c50abc9d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: FEr9Uplb0lMW5mCmcHsav9ukkOO303ROLAzYTNSDDcszc5OMibiHZg== Age: 13152 --- Additional Info --- Magic: GIF image data, version 89a, 50 x 50\012- data Size: 5083 Md5: ed786659a534e0d183c09a90c50abc9d Sha1: a6c3d90bfaa86a7cda490bc5d04c8939c31a414e Sha256: cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97
GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/notification.png HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/landers (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/png Content-Length: 449 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:27:57 GMT ETag: "bd5203f2cc9e7a9125e4575e029541b0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: CjmoozY_Ld_NBVI5Ua1gbVC1AYx7Kwjm8jKw1sSmWdB7MZHvgfVYIg== Age: 13152 --- Additional Info --- Magic: PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data Size: 449 Md5: bd5203f2cc9e7a9125e4575e029541b0 Sha1: 9fa565ab2f4b55da4735b79e529562252b3c9afe Sha256: db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f
GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/landers (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 32496 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:27:58 GMT ETag: "d4655cba21d806e849eed4e4119fbe1a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: KtTsEzGjIhu19qsLQ4sDzU7ThCH6ngpBPEiYZvGoptCBdT0fIP1pEA== Age: 13151 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3\012- data Size: 32496 Md5: d4655cba21d806e849eed4e4119fbe1a Sha1: 6453039d85005643e9d65074ca022f63b5d47cdd Sha256: 90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7
GET /1/prizewheel/cash/trcash/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/prizes/ (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 18f266f89565ca902fbf9c6dca8abff01cf0e29e1eafbcf6e93a832126d1b3b2 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/png Content-Length: 20297 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:27:57 GMT ETag: "21c566d339878bab58101cee37adbce8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: 4JijMVIonJlr-HoorbPx19vN62lYxdihxy4up2xnZqQegGxyPwsjYg== Age: 13152 --- Additional Info --- Magic: PNG image data, 250 x 179, 8-bit colormap, non-interlaced\012- data Size: 20297 Md5: 21c566d339878bab58101cee37adbce8 Sha1: 741159c0dd360a904ffcb63057e165d57e8fedd4 Sha256: 18f266f89565ca902fbf9c6dca8abff01cf0e29e1eafbcf6e93a832126d1b3b2
GET /1/prizewheel/cash/trcash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6 HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/js/landers/ (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 3f947d346a2bf83e521b39b8b12c179083538ee4becdc4be1680357929c4bd1a 54.230.111.99 HTTP/1.1 200 OK Content-Type: application/javascript Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Server: AmazonS3 Content-Encoding: gzip Date: Sun, 04 Dec 2022 11:27:57 GMT ETag: W/"cdf97653c213f02233f50a1ec975633c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: LCa-oM8gVqIxiWatLcwwsX3LYsoja1r2d0gePubgAsMQd8wyaM_5Wg== Age: 13152 --- Additional Info --- Magic: ASCII text, with very long lines (65475) Size: 52570 Md5: 754d909ee48fbc13967dc6a92a50f2b5 Sha1: 9db6fefead1ffa5a73112b1f0c5e43d3122b3026 Sha256: 3f947d346a2bf83e521b39b8b12c179083538ee4becdc4be1680357929c4bd1a Alerts: Blocklists: - fortinet: Phishing
GET /pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js HTTP/1.1 Host: desekansr.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/	URL: desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw (...) FQDN: desekansr.com IP: 139.45.197.250 HASH: e0d17f3c9ed344a38fd3526fea8b7221afe6b7c98962141ce0a78345a7424a68 139.45.197.250 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx Date: Sun, 04 Dec 2022 15:07:09 GMT Last-Modified: Thu, 01 Dec 2022 15:42:47 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"6388cb77-9a87" Access-Control-Allow-Credentials: true Cache-Control: no-cache Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: C source, ASCII text, with very long lines (39559), with no line terminators Size: 13926 Md5: b0248b30e57fdd1d6f2d1ca431d7cea1 Sha1: 8db557f8498245d59e56fbea78b2256c316e73f8 Sha256: e0d17f3c9ed344a38fd3526fea8b7221afe6b7c98962141ce0a78345a7424a68 Alerts: Blocklists: - quad9: Sinkholed
GET /1/prizewheel/cash/trcash/img/profiles/mena/female/3@0.25x.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/profile (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: cff50b269e3afdcf620ba9a8f6d3ac55b03a953136f3148d1b3296798bf57210 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2506 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 09:26:59 GMT ETag: "e69e56799051d24a67414a67301ac984" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: QHJPVyXkl8FLoIPhj3TrpMoXOvOyuF99vjLuRtHrYVERnRc3uYrt9A== Age: 20411 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2506 Md5: e69e56799051d24a67414a67301ac984 Sha1: 7d7db0281213342c25abf9e08937e38c7d1e8449 Sha256: cff50b269e3afdcf620ba9a8f6d3ac55b03a953136f3148d1b3296798bf57210
GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/landers (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3370 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:27:58 GMT ETag: "dc484e0043b5ff6191b1880c8779863c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: Uipi7e-qSIMOc9rhSYZn03tXz6_kgq_a9Qw6eR1jLB4zw5Wo06LcvQ== Age: 13152 --- Additional Info --- Magic: PNG image data, 1002 x 1002, 4-bit colormap, non-interlaced\012- data Size: 3370 Md5: dc484e0043b5ff6191b1880c8779863c Sha1: a5b67e3dff3dea3940eed090431aecbb36611b1d Sha256: 30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6
GET /1/prizewheel/cash/trcash/img/profiles/mena/male/9@0.25x.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/profile (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: d815f00761793a93ef88b73ea6451d9300a052ce64f454d30f9446af3bd9ccda 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2224 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:28:29 GMT ETag: "444a95e7661a07d48ae8a2b7d67792be" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: HxTMxcvxT63HmR4zhF2URoq4GS_7splmKlC9NL6tfhvG7gd4BPjytQ== Age: 13121 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2224 Md5: 444a95e7661a07d48ae8a2b7d67792be Sha1: e31aa744a72a17d6a3e04cd0e6f9a9fc59a47b59 Sha256: d815f00761793a93ef88b73ea6451d9300a052ce64f454d30f9446af3bd9ccda
GET /1/prizewheel/cash/trcash/img/profiles/mena/female/6@0.25x.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/profile (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: cfa55f5831710c40e2429ec2528b080fb2e6b11b560abfa8eaa1710b63770af3 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2950 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:28:29 GMT ETag: "5f6bc62e6e66a94b4ce9b971a798ceff" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: sJVHLozm_bolQ7-W13NpXAk4ZIhvmwweyFPfaaHfhzq3q7dKA-qSzw== Age: 13121 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2950 Md5: 5f6bc62e6e66a94b4ce9b971a798ceff Sha1: 05faaed9dbd1a5462485d4deeed888312a3b4973 Sha256: cfa55f5831710c40e2429ec2528b080fb2e6b11b560abfa8eaa1710b63770af3
GET /1/prizewheel/cash/trcash/img/profiles/mena/female/5@0.25x.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/profile (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 9db1c16bd8c27942b3d83cff9d81462ced2b7827ab45fe53ff3fcec32ed138d9 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2787 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:28:29 GMT ETag: "6063e3355d6e928b55810c359ee1d382" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: 8VIccE5woju0evtPaLXx7OMGkqkfo5ngJz77yaQuIrJOMEkmpbO0bQ== Age: 13121 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2787 Md5: 6063e3355d6e928b55810c359ee1d382 Sha1: a6a19cb61b8a8f9ed538a6467a7a41ed85fc01ad Sha256: 9db1c16bd8c27942b3d83cff9d81462ced2b7827ab45fe53ff3fcec32ed138d9
GET /1/prizewheel/cash/trcash/img/profiles/mena/male/3@0.25x.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/profile (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: c5e6dbfaac2e982618aa4ea88a1785ca965b57f3149551f194cdaae2d8406a53 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3301 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 02:28:55 GMT ETag: "49f1b40f2ed2ef127cb64293ae8b1524" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: jWMeiNQL9iFtq5L6IirlN5RLzLVlT3dXWTkcr-6Pcndb1bn_A1DzEA== Age: 45495 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 3301 Md5: 49f1b40f2ed2ef127cb64293ae8b1524 Sha1: 7939aacf51d0ba9b4358cb17ef40eb91fa31e27b Sha256: c5e6dbfaac2e982618aa4ea88a1785ca965b57f3149551f194cdaae2d8406a53
GET /1/prizewheel/cash/trcash/img/profiles/mena/male/10@0.25x.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/profile (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 0e98e32d27f59276dc137de153e32c28220a635701413565a4646dc8361fd94c 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3175 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:27:58 GMT ETag: "f8002e02aac0ac1bb22d2c80f36ebf15" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: 3LpIzoS7c0p46nyY6gFVwbqbVvYhoOkSzs5OgsTGhO2lgzsw4rflcQ== Age: 13152 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 3175 Md5: f8002e02aac0ac1bb22d2c80f36ebf15 Sha1: bf277a8747caf561b91a25860e772cf0f1a834a5 Sha256: 0e98e32d27f59276dc137de153e32c28220a635701413565a4646dc8361fd94c
GET /1/prizewheel/cash/trcash/img/profiles/mena/female/1@0.25x.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/profile (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 75f237c0722d2dd3ef7d7e4bad43a70ac57bad90c81b9cb8b9c9b445c0a76a1b 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2853 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:28:29 GMT ETag: "4ccf612375cb7df45e271ecd2983281e" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: sGZ5Xbg9AegN8jsZ52csUZLqKXDh-OFANbDRyLUVJ5_qSk7TQU2dGQ== Age: 13121 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2853 Md5: 4ccf612375cb7df45e271ecd2983281e Sha1: db4bc5414c30c39531e38c9a3f34b087cd68b4b6 Sha256: 75f237c0722d2dd3ef7d7e4bad43a70ac57bad90c81b9cb8b9c9b445c0a76a1b
GET /1/prizewheel/cash/trcash/img/profiles/mena/male/2@0.25x.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/profile (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: 50479fd6ff7c08b64aa01f0a415bba20d8ddd79a43becae604955e9086098cff 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 2258 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:28:29 GMT ETag: "07ee3d87dba4f97110c83432fcc8f3f6" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: jJRKl7nbqLPr94Et9yhsGfUUxVhdXRffXviN7GbNx4rPzmh7b96flw== Age: 13121 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2258 Md5: 07ee3d87dba4f97110c83432fcc8f3f6 Sha1: 80f21d2258991eaecca028683f58b16019bf9deb Sha256: 50479fd6ff7c08b64aa01f0a415bba20d8ddd79a43becae604955e9086098cff
GET /1/prizewheel/cash/trcash/img/fb-like.svg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/fb-like.svg FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: ab89135d104824678836f96584c3010e40f976d5b165fbd0a4a5b4a7aa367ca6 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT Server: AmazonS3 Content-Encoding: gzip Date: Sun, 04 Dec 2022 11:27:58 GMT ETag: W/"765203989756e91925e8f947e660b644" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: 61Ian3M2kOy_o18wc8UyViF01zJtbygeXmQ6u_GC1L0JU_C17J41vg== Age: 13152 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4627), with no line terminators Size: 2064 Md5: 6cf8d9808a9896bbdebf2695f527a2da Sha1: 569fc54492f5fdfe334a995f237a13fcb101796c Sha256: ab89135d104824678836f96584c3010e40f976d5b165fbd0a4a5b4a7aa367ca6 Alerts: Blocklists: - fortinet: Phishing
GET /1/prizewheel/cash/trcash/img/prizes/iphone-12-pro-max/proof.jpg HTTP/1.1 Host: officialwinner.xyz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html	URL: officialwinner.xyz/1/prizewheel/cash/trcash/img/prizes/ (...) FQDN: officialwinner.xyz IP: 54.230.111.99 HASH: b45fb8f8d4215fe20bc08946b5d492eba8974ebc31389c0e876ab02eaf159d6d 54.230.111.99 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 44544 Connection: keep-alive Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 04 Dec 2022 11:28:29 GMT ETag: "caf91f09d8a684d84b78e12563d960f9" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: qjz2UzG9VZf8VsjRbFo4xHkSBVH07bBNho6Odla_I1nZ9R9j8aVNSg== Age: 13121 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x394, components 3\012- data Size: 44544 Md5: caf91f09d8a684d84b78e12563d960f9 Sha1: 811c30bd1737647c893cba21aa19eb55b74090ef Sha256: b45fb8f8d4215fe20bc08946b5d492eba8974ebc31389c0e876ab02eaf159d6d
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sun, 04 Dec 2022 14:08:58 GMT cache-control: public,max-age=3600 age: 3491 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1500 Cache-Control: max-age=152682 Date: Sun, 04 Dec 2022 15:07:09 GMT Etag: "638c632b-1d7" Expires: Tue, 06 Dec 2022 09:31:51 GMT Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 31b129c94a90b1e695b21395cb54e378 Sha1: a3cae46b48d469cc61ab0581303bcd5f5b654db9 Sha256: fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: dyfqoPcB8Eq0gemmP3Wl0Q== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 52.13.173.34 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.13.173.34 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: WIVY9mVAa56LRQyg9c2AfGTc6BM= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4658 Expires: Sun, 04 Dec 2022 16:24:49 GMT Date: Sun, 04 Dec 2022 15:07:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 83e0936435ad95a15c9ec5ff9520f4fe Sha1: a8225ee0d8ae117f977f7ff817c342c62e91b5a9 Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4658 Expires: Sun, 04 Dec 2022 16:24:49 GMT Date: Sun, 04 Dec 2022 15:07:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 83e0936435ad95a15c9ec5ff9520f4fe Sha1: a8225ee0d8ae117f977f7ff817c342c62e91b5a9 Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4658 Expires: Sun, 04 Dec 2022 16:24:49 GMT Date: Sun, 04 Dec 2022 15:07:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 83e0936435ad95a15c9ec5ff9520f4fe Sha1: a8225ee0d8ae117f977f7ff817c342c62e91b5a9 Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8315 x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: clsAMGVboAMFfxg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 6UQ_BhPmpVpe9w6gsExB-EpNq_syeCCK6fr4Y1FFK1jDJh_n1Sd0Eg== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 21:52:47 GMT age: 62064 etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8315 Md5: db1701b7b9d161a0c935bb6e10b17893 Sha1: 22a8c4bd58c729c1abcf794466e8f3231dfb034b Sha256: b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 16143 x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cdGyLGqmoAMFnaA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: kRs3oBWnSs5asyPdvz6kkooy7pqm2Yr8R_2x8EXCVn3dBz_aEJurRQ== via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Sun, 04 Dec 2022 07:26:41 GMT age: 27630 etag: "1d702df3a64258628f4124eafd580695f2d350af" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 16143 Md5: 14dcca2a9c4792d835ee709bcd947402 Sha1: 1d702df3a64258628f4124eafd580695f2d350af Sha256: da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4666 x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: clr_-GiboAMFwww= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ== via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 21:44:01 GMT age: 62590 etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4666 Md5: c01fe1cccdb3b672bbade6d98217ffe9 Sha1: a9a529dc9894827f6243a1bf57f81caa4fe88fc2 Sha256: c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7503 x-amzn-requestid: a4120308-c51e-4cff-99c2-90e86018b05d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cgZjCGkVIAMFpsw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6389a2e0-6fdf362a6d32449239476155;Sampled=0 x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:52 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: dy619jlSTwCjwDhGuLmwTMcmuYj1Kg2oLA7xORyAYX8IHWimhNo6pw== via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google date: Sun, 04 Dec 2022 07:16:07 GMT age: 28264 etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7503 Md5: c1a6f4805f59db44f9d3520d88701a58 Sha1: 6a0258e8c97ce09f1723382c8a16d9682b7dc50c Sha256: ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5681 x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cltXnEotIAMFqkA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 21:52:38 GMT age: 62073 etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5681 Md5: 43309032a892c486f9985ef520df696e Sha1: 36f4682ca6a33ff80ee02129c77e6f27e996ede0 Sha256: 24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10431 x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: clsCGEwxIAMF34g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 21:47:06 GMT age: 62405 etag: "8637105f41058bc0d2b259d462b560881928adb6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10431 Md5: 2636f91bb8fa4d9bb7bef114c248a9ae Sha1: 8637105f41058bc0d2b259d462b560881928adb6 Sha256: 3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 1516 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Sun, 04 Dec 2022 15:07:08 GMT 

                                        
                                            
Last-Modified: Sun, 04 Dec 2022 14:41:52 GMT 

                                        
                                            
Server: ECS (ska/F70A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    fb2c0697c6d9a96a5411dd2952947458

                                                Sha1:   79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4

                                                Sha256: 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 04 Dec 2022 14:20:07 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 2821 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    14cd9a0afb6ba9a763651d5112760d1e

                                                Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

                                                Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

                                        
                                            GET /1/prizewheel/cash/trcash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Date: Sun, 04 Dec 2022 11:27:57 GMT 

                                        
                                            
ETag: W/"cd41123a11e97e0f2444b57d180631a0" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: Jtt5rLst_7jrkaLlubKwHvpOIywoXQyDbxp62kduYfTL-PA0EPcGYQ== 

                                        
                                            
Age: 13152 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (3495), with no line terminators

                                                Size:   1095

                                                Md5:    ba8a1435ff223b2909706f678310def7

                                                Sha1:   6d945ed87239f4b1544ee080873e3aacd70ac653

                                                Sha256: cafe68f02f3d4331a25a26a8419497011c8d18b583064f9ad7eacc167a5f5081

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sun, 04 Dec 2022 15:07:08 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/loader.gif HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/gif

                                        

                                        
                                            
Content-Length: 5083 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 04 Dec 2022 11:27:57 GMT 

                                        
                                            
ETag: "ed786659a534e0d183c09a90c50abc9d" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: FEr9Uplb0lMW5mCmcHsav9ukkOO303ROLAzYTNSDDcszc5OMibiHZg== 

                                        
                                            
Age: 13152 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 50 x 50\012- data

                                                Size:   5083

                                                Md5:    ed786659a534e0d183c09a90c50abc9d

                                                Sha1:   a6c3d90bfaa86a7cda490bc5d04c8939c31a414e

                                                Sha256: cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97

                                        
                                            GET /1/prizewheel/cash/trcash/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Content-Length: 32496 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:04 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 04 Dec 2022 11:27:58 GMT 

                                        
                                            
ETag: "d4655cba21d806e849eed4e4119fbe1a" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: KtTsEzGjIhu19qsLQ4sDzU7ThCH6ngpBPEiYZvGoptCBdT0fIP1pEA== 

                                        
                                            
Age: 13151 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3\012- data

                                                Size:   32496

                                                Md5:    d4655cba21d806e849eed4e4119fbe1a

                                                Sha1:   6453039d85005643e9d65074ca022f63b5d47cdd

                                                Sha256: 90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7

                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/female/3@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Content-Length: 2506 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 04 Dec 2022 09:26:59 GMT 

                                        
                                            
ETag: "e69e56799051d24a67414a67301ac984" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: QHJPVyXkl8FLoIPhj3TrpMoXOvOyuF99vjLuRtHrYVERnRc3uYrt9A== 

                                        
                                            
Age: 20411 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   2506

                                                Md5:    e69e56799051d24a67414a67301ac984

                                                Sha1:   7d7db0281213342c25abf9e08937e38c7d1e8449

                                                Sha256: cff50b269e3afdcf620ba9a8f6d3ac55b03a953136f3148d1b3296798bf57210

                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/male/9@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Content-Length: 2224 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 04 Dec 2022 11:28:29 GMT 

                                        
                                            
ETag: "444a95e7661a07d48ae8a2b7d67792be" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: HxTMxcvxT63HmR4zhF2URoq4GS_7splmKlC9NL6tfhvG7gd4BPjytQ== 

                                        
                                            
Age: 13121 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   2224

                                                Md5:    444a95e7661a07d48ae8a2b7d67792be

                                                Sha1:   e31aa744a72a17d6a3e04cd0e6f9a9fc59a47b59

                                                Sha256: d815f00761793a93ef88b73ea6451d9300a052ce64f454d30f9446af3bd9ccda

                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/female/5@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Content-Length: 2787 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 04 Dec 2022 11:28:29 GMT 

                                        
                                            
ETag: "6063e3355d6e928b55810c359ee1d382" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: 8VIccE5woju0evtPaLXx7OMGkqkfo5ngJz77yaQuIrJOMEkmpbO0bQ== 

                                        
                                            
Age: 13121 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   2787

                                                Md5:    6063e3355d6e928b55810c359ee1d382

                                                Sha1:   a6a19cb61b8a8f9ed538a6467a7a41ed85fc01ad

                                                Sha256: 9db1c16bd8c27942b3d83cff9d81462ced2b7827ab45fe53ff3fcec32ed138d9

                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/male/10@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Content-Length: 3175 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 04 Dec 2022 11:27:58 GMT 

                                        
                                            
ETag: "f8002e02aac0ac1bb22d2c80f36ebf15" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: 3LpIzoS7c0p46nyY6gFVwbqbVvYhoOkSzs5OgsTGhO2lgzsw4rflcQ== 

                                        
                                            
Age: 13152 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   3175

                                                Md5:    f8002e02aac0ac1bb22d2c80f36ebf15

                                                Sha1:   bf277a8747caf561b91a25860e772cf0f1a834a5

                                                Sha256: 0e98e32d27f59276dc137de153e32c28220a635701413565a4646dc8361fd94c

                                        
                                            GET /1/prizewheel/cash/trcash/img/profiles/mena/male/2@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Content-Length: 2258 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 04 Dec 2022 11:28:29 GMT 

                                        
                                            
ETag: "07ee3d87dba4f97110c83432fcc8f3f6" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: jJRKl7nbqLPr94Et9yhsGfUUxVhdXRffXviN7GbNx4rPzmh7b96flw== 

                                        
                                            
Age: 13121 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   2258

                                                Md5:    07ee3d87dba4f97110c83432fcc8f3f6

                                                Sha1:   80f21d2258991eaecca028683f58b16019bf9deb

                                                Sha256: 50479fd6ff7c08b64aa01f0a415bba20d8ddd79a43becae604955e9086098cff

                                        
                                            GET /1/prizewheel/cash/trcash/img/prizes/iphone-12-pro-max/proof.jpg HTTP/1.1 

                                        
                                            
Host: officialwinner.xyz

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://officialwinner.xyz/1/prizewheel/cash/trcash/index.html

                                         54.230.111.99

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/jpeg

                                        

                                        
                                            
Content-Length: 44544 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Wed, 16 Nov 2022 08:55:05 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 04 Dec 2022 11:28:29 GMT 

                                        
                                            
ETag: "caf91f09d8a684d84b78e12563d960f9" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: qjz2UzG9VZf8VsjRbFo4xHkSBVH07bBNho6Odla_I1nZ9R9j8aVNSg== 

                                        
                                            
Age: 13121 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x394, components 3\012- data

                                                Size:   44544

                                                Md5:    caf91f09d8a684d84b78e12563d960f9

                                                Sha1:   811c30bd1737647c893cba21aa19eb55b74090ef

                                                Sha256: b45fb8f8d4215fe20bc08946b5d492eba8974ebc31389c0e876ab02eaf159d6d

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 1500 

                                        
                                            
Cache-Control: max-age=152682 

                                        
                                            
Date: Sun, 04 Dec 2022 15:07:09 GMT 

                                        
                                            
Etag: "638c632b-1d7" 

                                        
                                            
Expires: Tue, 06 Dec 2022 09:31:51 GMT 

                                        
                                            
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT 

                                        
                                            
Server: ECS (ska/F70A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    31b129c94a90b1e695b21395cb54e378

                                                Sha1:   a3cae46b48d469cc61ab0581303bcd5f5b654db9

                                                Sha256: fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4658 

                                        
                                            
Expires: Sun, 04 Dec 2022 16:24:49 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 15:07:11 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    83e0936435ad95a15c9ec5ff9520f4fe

                                                Sha1:   a8225ee0d8ae117f977f7ff817c342c62e91b5a9

                                                Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4658 

                                        
                                            
Expires: Sun, 04 Dec 2022 16:24:49 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 15:07:11 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    83e0936435ad95a15c9ec5ff9520f4fe

                                                Sha1:   a8225ee0d8ae117f977f7ff817c342c62e91b5a9

                                                Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 16143 

                                        
                                            
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cdGyLGqmoAMFnaA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: kRs3oBWnSs5asyPdvz6kkooy7pqm2Yr8R_2x8EXCVn3dBz_aEJurRQ== 

                                        
                                            
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 04 Dec 2022 07:26:41 GMT 

                                        
                                            
age: 27630 

                                        
                                            
etag: "1d702df3a64258628f4124eafd580695f2d350af" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   16143

                                                Md5:    14dcca2a9c4792d835ee709bcd947402

                                                Sha1:   1d702df3a64258628f4124eafd580695f2d350af

                                                Sha256: da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7503 

                                        
                                            
x-amzn-requestid: a4120308-c51e-4cff-99c2-90e86018b05d 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cgZjCGkVIAMFpsw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6389a2e0-6fdf362a6d32449239476155;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:52 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: dy619jlSTwCjwDhGuLmwTMcmuYj1Kg2oLA7xORyAYX8IHWimhNo6pw== 

                                        
                                            
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 04 Dec 2022 07:16:07 GMT 

                                        
                                            
age: 28264 

                                        
                                            
etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7503

                                                Md5:    c1a6f4805f59db44f9d3520d88701a58

                                                Sha1:   6a0258e8c97ce09f1723382c8a16d9682b7dc50c

                                                Sha256: ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10431 

                                        
                                            
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: clsCGEwxIAMF34g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w== 

                                        
                                            
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 03 Dec 2022 21:47:06 GMT 

                                        
                                            
age: 62405 

                                        
                                            
etag: "8637105f41058bc0d2b259d462b560881928adb6" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10431

                                                Md5:    2636f91bb8fa4d9bb7bef114c248a9ae

                                                Sha1:   8637105f41058bc0d2b259d462b560881928adb6

                                                Sha256: 3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7

URL	officialwinner.xyz/1/prizewheel/cash/trcash/index.html
IP	54.230.111.99 (United States)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-12-04 15:07:19 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	5
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 54.230.111.99

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: officialwinner.xyz

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (11)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 96ed9a2af4ea2a854fa1e9d3ccab2fdc7557e6c14e93b59043c67530df9571e6

Executed Writes (2)

#1 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

#2 JavaScript::Write (size: 68) - SHA256: fa48e77f8d84201b889071f722b3c12f0ff65d581f746a780cd66e6d45606a2f

HTTP Transactions (39)

Overview

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 54.230.111.99

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: officialwinner.xyz

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (11)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 96ed9a2af4ea2a854fa1e9d3ccab2fdc7557e6c14e93b59043c67530df9571e6

Executed Writes (2)

#1 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

#2 JavaScript::Write (size: 68) - SHA256: fa48e77f8d84201b889071f722b3c12f0ff65d581f746a780cd66e6d45606a2f

HTTP Transactions (39)

Network Intrusion Detection Systems