www.zodertracker.com/ea636559-4b7b-4d7b-835e-004bdcc4a306
18.193.146.82302 0 B URL HTTP/1.1 www.zodertracker.com/ea636559-4b7b-4d7b-835e-004bdcc4a306
IP 18.193.146.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ea636559-4b7b-4d7b-835e-004bdcc4a306 HTTP/1.1
Host: www.zodertracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Pragma: no-cache
Set-Cookie: ea636559-4b7b-4d7b-835e-004bdcc4a306-v4=pBldRp2MC1EqdmViIUcD6KU6nymbDr3OSFiQsmXBsxo; Max-Age=86400; Expires=Fri, 25-Nov-2022 21:39:59 GMT; Domain=www.zodertracker.com; Path=/; HttpOnly
cep-v4=g7LAAIhr4n3jCP3XNbXtEuzHtMrhvtb8GbRHekt_x-DMC5z71c1zPuAs4vtl5kck6dKkeaOvXTcAB2xjF9jTOjOx7rM13LcK7ZGSsG9fZDzx9Fn0lrP6l7aqfwgQbwNKlvPglr5NV1XmRjVYjPwRpQNl55vCd2polfkt1waOTrDCkz2GSWtQiFLEJMnZVdVkuWmAa4pykIb2Z9kiW_6Zkhpwvr_xJ0J_LtOWO66bFNe9-TEBpRIQbudW_DqNpCDO77Dm3xL1_o4MWa7BkUzuYtUEXZRl1F0AKvsWxLHCTHgSKySAIzuxlQfpZc8xexD1DZof8mO7cYJkkw8gergB8I1dpuiCvaMlOjIMcebBIDU; Max-Age=86400; Expires=Fri, 25-Nov-2022 21:39:59 GMT; Domain=www.zodertracker.com; Path=/; HttpOnly
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8901
Expires: Fri, 25 Nov 2022 00:08:20 GMT
Date: Thu, 24 Nov 2022 21:39:59 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5809
Cache-Control: max-age=138481
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:39:59 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 12:08:00 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6463
Expires: Thu, 24 Nov 2022 23:27:42 GMT
Date: Thu, 24 Nov 2022 21:39:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 21:17:20 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1359
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GVMUI9idOBhbcSSCZ0yrqqNKbhCNiRabWJ53E2AIJjaFM0/ZjuVHqC3F4kECRueHxtC2JoMflaE=
x-amz-request-id: PA6S2PMDVWQG6TSD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 20:43:32 GMT
age: 3387
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:39:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6d3caa9ea7da7c50a978a4dcba24ad8a
8610534d138de0abc6f9322a335b23dbc5281faf
f8dad104f458552e2466a9461b602fd70a3b250ba0305b4213fb205b0727d1f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F8DAD104F458552E2466A9461B602FD70A3B250BA0305B4213FB205B0727D1F0"
Last-Modified: Thu, 24 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 25 Nov 2022 03:39:59 GMT
Date: Thu, 24 Nov 2022 21:39:59 GMT
Connection: keep-alive
realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
46.101.99.16200 OK 5.0 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source, Unicode text, UTF-8 text, with very long lines (514)
Hash 28031548827feb6e0ac7649b1c4becd3
18abc8f2c97c49e458177cb279298f53019e5902
1fd8d06626c881b8ab8e02adcfb1d6225950797dd71db67b914387feac367119
GET /raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: text/html
Last-Modified: Mon, 24 Oct 2022 16:02:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6356b704-4f59"
Content-Encoding: gzip
realtimewin.com/raffle_boxes_gift_ntx/css/6h0fj0l122.css
46.101.99.16200 OK 7.8 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/css/6h0fj0l122.css
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (7771), with no line terminators
Hash 6e3fd6255cd4b78c2da62e84c1ed7a7f
68ac4757dc2ed808fd29fc628c61ef9ce41039ee
5323e16100f8ee32d11bc2d842895a35f32429f890c9ed5f0bf48d2261b73873
GET /raffle_boxes_gift_ntx/css/6h0fj0l122.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: text/css
Content-Length: 7771
Last-Modified: Thu, 20 Oct 2022 09:23:06 GMT
Connection: keep-alive
ETag: "6351137a-1e5b"
Accept-Ranges: bytes
code.jquery.com/jquery-3.6.0.min.js
69.16.175.10200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 69.16.175.10:0
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 21:39:59 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669325999.dop203.sk1.t,1669325999.cds069.sk1.hn,1669325999.cds210.sk1.c
X-Firefox-Spdy: h2
realtimewin.com/raffle_boxes_gift_ntx/js/config.js
46.101.99.16200 OK 1.3 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/js/config.js
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
Hash a2c2f37e9858846864a243799c367d50
c3516e0a8a4691dc981ee35db1772e28d41236a2
3f0a01153acb4d045828d89685bfecc3142c8cb615f641e733a5ca56fd6c73ce
Analyzer Verdict Alert fortinet Phishing
GET /raffle_boxes_gift_ntx/js/config.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: application/javascript
Content-Length: 1345
Last-Modified: Thu, 20 Oct 2022 09:23:12 GMT
Connection: keep-alive
ETag: "63511380-541"
Accept-Ranges: bytes
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash fd6e45fec9010f48d052dc17826c75f0
218e01b9707f1e123eef81d70f24f0d95e526465
8ba8111e6058eb953ea4804e6fcbbba380a2087609b5bc49c7ccade7fef100a8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4981
Cache-Control: max-age=125069
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:39:59 GMT
Etag: "637f16c7-116"
Expires: Sat, 26 Nov 2022 08:24:28 GMT
Last-Modified: Thu, 24 Nov 2022 07:01:27 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278
realtimewin.com/raffle_boxes_gift_ntx/css/4pbny7k30a.css
46.101.99.16200 OK 1.4 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/css/4pbny7k30a.css
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
Hash 6c9276f3d527ee8da644994a6ce48cca
eb107297ac31f1410aa5ba830d8035ccd2ffa837
c714c752c8a7825f5993e5507190117ccf63ade68d44d455efcdd81c85ac7d48
GET /raffle_boxes_gift_ntx/css/4pbny7k30a.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: text/css
Content-Length: 1397
Last-Modified: Thu, 20 Oct 2022 09:23:06 GMT
Connection: keep-alive
ETag: "6351137a-575"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/js/helpers.js
46.101.99.16200 OK 2.2 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/js/helpers.js
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
Hash 328bc403d211866b7fbeeb5a3d48057e
77326f838722cbf346cc7a657ab7a69e391657e8
290969069b2a56f48ae9975daa49685e52f2d44a3977c4d6f2efccf3eceb04ec
Analyzer Verdict Alert fortinet Phishing
GET /raffle_boxes_gift_ntx/js/helpers.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: application/javascript
Content-Length: 2224
Last-Modified: Thu, 20 Oct 2022 09:23:12 GMT
Connection: keep-alive
ETag: "63511380-8b0"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/js/general.js
46.101.99.16200 OK 4.7 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/js/general.js
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (438)
Hash 543951b88566cc693fd4be7683d0ab7f
8374246b02b8d49c113a3bb33999371900bfc608
ba75e1b970da91a73273e6659468fc8fc89cd1e1c8fbff5ba9d7c012344506b0
Analyzer Verdict Alert fortinet Phishing
GET /raffle_boxes_gift_ntx/js/general.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: application/javascript
Content-Length: 4735
Last-Modified: Thu, 20 Oct 2022 09:23:12 GMT
Connection: keep-alive
ETag: "63511380-127f"
Accept-Ranges: bytes
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash fd6e45fec9010f48d052dc17826c75f0
218e01b9707f1e123eef81d70f24f0d95e526465
8ba8111e6058eb953ea4804e6fcbbba380a2087609b5bc49c7ccade7fef100a8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4981
Cache-Control: max-age=125069
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:39:59 GMT
Etag: "637f16c7-116"
Expires: Sat, 26 Nov 2022 08:24:28 GMT
Last-Modified: Thu, 24 Nov 2022 07:01:27 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 278
realtimewin.com/raffle_boxes_gift_ntx/js/visual.js
46.101.99.16200 OK 7.3 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/js/visual.js
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (564)
Hash e8b75b31218a58574864ba2e377e044b
d6a0668521c72106c46ea0a67483ca57f59bfc7b
d5a419e8a0d4db2912a9a0df5a9a52f06a947775a1ce50e047056f513da96dc0
Analyzer Verdict Alert fortinet Phishing
GET /raffle_boxes_gift_ntx/js/visual.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: application/javascript
Content-Length: 7313
Last-Modified: Thu, 20 Oct 2022 09:23:12 GMT
Connection: keep-alive
ETag: "63511380-1c91"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/css/7j3yarnp5h.css
46.101.99.16200 OK 395 B URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/css/7j3yarnp5h.css
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
Hash 3f9401a877cb75e550c646959ecd1343
038fbca8d375d51e01c312f19d18c34b93e17762
fdbeabb5b3aa977fa4416df3852acbf9fadf5755172a059961dc1ba72bb1d345
GET /raffle_boxes_gift_ntx/css/7j3yarnp5h.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: text/css
Content-Length: 395
Last-Modified: Thu, 20 Oct 2022 09:23:07 GMT
Connection: keep-alive
ETag: "6351137b-18b"
Accept-Ranges: bytes
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e62367fb5e0af824dd1d11cd8497b3fe
4760db938f2a518eea468ca7e92a87971e663761
3264556e5fe1bc7885248a574915ee05845659b5f0517e7e2ee740206dd051ad
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 328
Cache-Control: max-age=138738
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:39:59 GMT
Etag: "637f5e5a-1d7"
Expires: Sat, 26 Nov 2022 12:12:17 GMT
Last-Modified: Thu, 24 Nov 2022 12:06:50 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
realtimewin.com/raffle_boxes_gift_ntx/js/questions.js
46.101.99.16200 OK 5.3 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/js/questions.js
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (395)
Hash 9c7f08f0923a57726409d033a9e49469
96b2d3678db2afd0622c069be676732074dadff8
b1a3eace772da9b2cc78947c1d209e4780f6bdd53431afae6ff178cff0c14d6e
Analyzer Verdict Alert fortinet Phishing
GET /raffle_boxes_gift_ntx/js/questions.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: application/javascript
Content-Length: 5251
Last-Modified: Thu, 20 Oct 2022 09:23:12 GMT
Connection: keep-alive
ETag: "63511380-1483"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/css/76xzrsbt8n.css
46.101.99.16200 OK 3.8 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/css/76xzrsbt8n.css
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
Hash 56591d9cbca8de25b9e8ed95b60d4f61
a3c74f31ce5fe4f0dc50dce291ae00ac3c14a0ff
967c2a487286ccb51d63128dfa97caae1b5dcfe39a22be90702285aed0f906c8
GET /raffle_boxes_gift_ntx/css/76xzrsbt8n.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: text/css
Content-Length: 3757
Last-Modified: Thu, 20 Oct 2022 09:23:06 GMT
Connection: keep-alive
ETag: "6351137a-ead"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/js/flow.js
46.101.99.16200 OK 13 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/js/flow.js
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (1562)
Hash 39896c37ecf351b558e3f5f81ff09455
dd269fc8ac86a68496175ff7ce9948f5096b6a39
32956e236351d3d4cfc542eac19cff5f07ba68117ffcee4e1e9b60a8ce531e9d
Analyzer Verdict Alert fortinet Phishing
GET /raffle_boxes_gift_ntx/js/flow.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: application/javascript
Content-Length: 13099
Last-Modified: Thu, 20 Oct 2022 09:23:12 GMT
Connection: keep-alive
ETag: "63511380-332b"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/css/caixes.css
46.101.99.16200 OK 63 B URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/css/caixes.css
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
Hash 69870e317698e087a6244cd2b01500ee
7094538022349e444aa0219f97d973e602db5696
980ce3f8d7eeeacb8009f84c0e8f29949a3ff024418a599c1233927e29ffee91
GET /raffle_boxes_gift_ntx/css/caixes.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: text/css
Content-Length: 63
Last-Modified: Thu, 20 Oct 2022 09:23:07 GMT
Connection: keep-alive
ETag: "6351137b-3f"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:40:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:40:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
realtimewin.com/raffle_boxes_gift_ntx/css/font-awesome.css
46.101.99.16200 OK 122 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/css/font-awesome.css
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (659)
Size 122 kB (122128 bytes)
Hash a8dd6f550f891acde535b28c1d3fe75f
131430af33a8079c2934875095760a7b2ae71835
6a54d489577cec60935437ee317cd09b989ccafde66f2e9e4d645c64f5f5ba28
GET /raffle_boxes_gift_ntx/css/font-awesome.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:39:59 GMT
Content-Type: text/css
Content-Length: 122128
Last-Modified: Thu, 20 Oct 2022 09:23:07 GMT
Connection: keep-alive
ETag: "6351137b-1dd10"
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
142.250.74.10200 OK 886 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
IP 142.250.74.10:0
Hash 07f0305326fd95d6e8a28d3a359c5709
a820b9295279ba1969c9f78c3a4765b5b92e0e6f
38f85d6e14fe628b7dc78745e84df56c6efe237851a56bc8cb87d29d89ea3b15
GET /css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 21:40:00 GMT
date: Thu, 24 Nov 2022 21:40:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-4530RD5FPC
142.250.74.168200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-4530RD5FPC
IP 142.250.74.168:0
File type ASCII text, with very long lines (21484)
Hash 4b4dae9010634e439ff0afb12e42564b
b03eea245245c981245fe61cc8918a8282b7013e
7213245718f515561c217375079f41c9cd196a0ba2abcdbd0aec880362070780
GET /gtag/js?id=G-4530RD5FPC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 21:40:00 GMT
expires: Thu, 24 Nov 2022 21:40:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76630
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:40:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:40:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
realtimewin.com/raffle_boxes_gift_ntx/img/country_flag.png
46.101.99.16200 OK 7.5 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img/country_flag.png
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data
Hash adda4dd4047875822fca3cb152207097
7b156f60bd3cadd2a8fcac898b0a1c14f38c5b61
3711a9848995e7837c8e52ad00e590535ac52684fe3189270c266d9793400464
GET /raffle_boxes_gift_ntx/img/country_flag.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:00 GMT
Content-Type: image/png
Content-Length: 7488
Last-Modified: Thu, 20 Oct 2022 09:23:09 GMT
Connection: keep-alive
ETag: "6351137d-1d40"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/img/card_brand.png
46.101.99.16200 OK 5.5 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img/card_brand.png
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 481 x 353, 8-bit/color RGBA, non-interlaced\012- data
Hash 6b453124c0b138f47b28be006580d9af
5ae614c83d500b17f57f6967c7765c1f7666a082
65b8378ffddc4c79828d04ced7528d45f1c7ecb618bad0ccdeb72219ef0ab328
GET /raffle_boxes_gift_ntx/img/card_brand.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:00 GMT
Content-Type: image/png
Content-Length: 5510
Last-Modified: Thu, 20 Oct 2022 09:23:07 GMT
Connection: keep-alive
ETag: "6351137b-1586"
Accept-Ranges: bytes
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
104.18.11.207200 OK 25 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP 104.18.11.207:0
File type ASCII text, with very long lines (65324)
Hash d21440bcffa019eb4b55e8ff512222fe
b581340d9d1ce26165ea61e0cd2b496ecee8390b
153ed9f5eb8df6ffbb28b7b75d19091aa63a07786ca57eefa6799ca5268745ef
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 21:40:00 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 08/20/2022 02:33:27
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 2d68a6f1c0c74cd757bd2622dd23138d
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76f54cebdf15b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ef9977375b43cff4bcab2399a93e52c3
c78696c3181a045b15c805e9b30893bd2bd98a2d
b5fb267bed0c5336cec5febdee3eff4f38301506ce8168cdf91d9cc992e6758d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5FB267BED0C5336CEC5FEBDEE3EFF4F38301506CE8168CDF91D9CC992E6758D"
Last-Modified: Thu, 24 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5398
Expires: Thu, 24 Nov 2022 23:09:58 GMT
Date: Thu, 24 Nov 2022 21:40:00 GMT
Connection: keep-alive
www.zodertracker.com/d/.js?lpref=&lpurl=https%3A%2F%2Frealtimewin.com%2Fraffle_boxes_gift_ntx%2F%3Fcep%3D9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o%26lptoken%3D166e693f3244779e999e&lpt=Prize%20Alert!&vtm=1669325999771
18.193.146.82200 OK 2.9 kB URL HTTP/2 www.zodertracker.com/d/.js?lpref=&lpurl=https%3A%2F%2Frealtimewin.com%2Fraffle_boxes_gift_ntx%2F%3Fcep%3D9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o%26lptoken%3D166e693f3244779e999e&lpt=Prize%20Alert!&vtm=1669325999771
IP 18.193.146.82:0
File type ASCII text, with very long lines (837)
Hash 6834bfbe48310e4d52724440ce1dc044
0d5a6af89a7278dba2e85b3b35c0e8736f926a2a
0ac8833952f986725c1f5b1018a12d5c220d859cf1991ddd4b4abdf4c3ed37ef
GET /d/.js?lpref=&lpurl=https%3A%2F%2Frealtimewin.com%2Fraffle_boxes_gift_ntx%2F%3Fcep%3D9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o%26lptoken%3D166e693f3244779e999e&lpt=Prize%20Alert!&vtm=1669325999771 HTTP/1.1
Host: www.zodertracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:40:00 GMT
content-type: application/javascript;charset=UTF-8
content-length: 2865
access-control-allow-origin: *
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
172.64.202.28200 OK 4.5 kB URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
IP 172.64.202.28:0
File type ASCII text, with very long lines (26500)
Hash 8b5306ef705a0d2adcecf24ab7375be5
b8ba4e8aedd8f1eea0b8afd0cca5d5a5ae938150
538913858c932f4ccf1e7698a6e1bca0e8b163ac852a3282c6662708568e6458
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 21:40:00 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 965419e53972184f1266c4d4299747c4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: ZHnlPF3J2MremyFPwr6TTzLS1Dzz_86TFKCv9OSseKl0FXD1bEV_gA==
age: 4269426
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VNVhDnniun5LdBttohG%2BC9gnyQQzowZ8P699gLMPNn%2FZcxDRYG0unHUbEY9jMP11eiakrXUCrhQpl8sn2oAivR4nqhR4qSHaNh9cTB87AgDVSpb3qPu48kMnbK%2BkJ5V88snZHlv8Rw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f54cee3d6088bf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
realtimewin.com/raffle_boxes_gift_ntx/img/background.jpg
46.101.99.16200 OK 26 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img/background.jpg
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x700, components 3\012- data
Hash c223c3e28d314de6665b259bf4b1f108
db4a0ca11f30e5ff79c655dc2bb01237e0e9d36d
9a57e412e34d1cfd2e3bcff3da172f64d3ecaa81bb0bcf44959da344e885a8cc
GET /raffle_boxes_gift_ntx/img/background.jpg HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/css/caixes.css
Cookie: _ga_4530RD5FPC=GS1.1.1669325999.1.0.1669325999.0.0.0; _ga=GA1.1.1259350550.1669326000; vl-cep=cep=WWonqPDNRdoeQzEWlyIaW2YxBQtw40oInN3iu7BXnI7x0qFxUYDtpvDNfDw8klJJitn4CZUHqPaarm2lp5k9n1mntFUIjkJHAnELQYDMUxEIstvS2ARURdekNNJK0f5wDkKa5dsCicPaBjweNMfKvOHrgG4H9sPIeqfpJPl2RT3JrZOO7mPOiIFZMIxJ8GGezdEI81ybGAB0EIY6EovcOC24z2WTrkf1j_vSMB5o2adkOyub4o6N3td7JAHwRrMvIejg6AcDkc48c9Ls02SVNQbNGpzwNX8YooFT8wOzsO65BtkDvJRCzhxS1FIZdPvoopvUNiX5OgbZduUrWf-KqsepGitP_ELJbu_o21x0WGc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:00 GMT
Content-Type: image/jpeg
Content-Length: 25661
Last-Modified: Thu, 20 Oct 2022 09:23:07 GMT
Connection: keep-alive
ETag: "6351137b-643d"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/img_caixa/tampa.png
46.101.99.16200 OK 9.8 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img_caixa/tampa.png
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash 4edeec031227d39fba95ca02e2222254
8785da80d2c0b27f163d4ac00985088b97af7c66
e0d99a60693def5d0631379e734e53113b064781475e09d49778df3e51490c75
GET /raffle_boxes_gift_ntx/img_caixa/tampa.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Cookie: _ga_4530RD5FPC=GS1.1.1669325999.1.0.1669325999.0.0.0; _ga=GA1.1.1259350550.1669326000; vl-cep=cep=WWonqPDNRdoeQzEWlyIaW2YxBQtw40oInN3iu7BXnI7x0qFxUYDtpvDNfDw8klJJitn4CZUHqPaarm2lp5k9n1mntFUIjkJHAnELQYDMUxEIstvS2ARURdekNNJK0f5wDkKa5dsCicPaBjweNMfKvOHrgG4H9sPIeqfpJPl2RT3JrZOO7mPOiIFZMIxJ8GGezdEI81ybGAB0EIY6EovcOC24z2WTrkf1j_vSMB5o2adkOyub4o6N3td7JAHwRrMvIejg6AcDkc48c9Ls02SVNQbNGpzwNX8YooFT8wOzsO65BtkDvJRCzhxS1FIZdPvoopvUNiX5OgbZduUrWf-KqsepGitP_ELJbu_o21x0WGc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:00 GMT
Content-Type: image/png
Content-Length: 9752
Last-Modified: Thu, 20 Oct 2022 09:23:11 GMT
Connection: keep-alive
ETag: "6351137f-2618"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/img_caixa/interior.png
46.101.99.16200 OK 768 B URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img_caixa/interior.png
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit colormap, non-interlaced\012- data
Hash af77ae24aaa7aa332958f33f2e254ccc
3bf2a3b03733868dd64288b2d682f617f26d3321
4b1fcfe5b92441547d54a9eae2635fe66a33ca178f0da9d06e4a2daac5d74c89
GET /raffle_boxes_gift_ntx/img_caixa/interior.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Cookie: _ga_4530RD5FPC=GS1.1.1669325999.1.0.1669325999.0.0.0; _ga=GA1.1.1259350550.1669326000; vl-cep=cep=WWonqPDNRdoeQzEWlyIaW2YxBQtw40oInN3iu7BXnI7x0qFxUYDtpvDNfDw8klJJitn4CZUHqPaarm2lp5k9n1mntFUIjkJHAnELQYDMUxEIstvS2ARURdekNNJK0f5wDkKa5dsCicPaBjweNMfKvOHrgG4H9sPIeqfpJPl2RT3JrZOO7mPOiIFZMIxJ8GGezdEI81ybGAB0EIY6EovcOC24z2WTrkf1j_vSMB5o2adkOyub4o6N3td7JAHwRrMvIejg6AcDkc48c9Ls02SVNQbNGpzwNX8YooFT8wOzsO65BtkDvJRCzhxS1FIZdPvoopvUNiX5OgbZduUrWf-KqsepGitP_ELJbu_o21x0WGc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:00 GMT
Content-Type: image/png
Content-Length: 768
Last-Modified: Thu, 20 Oct 2022 09:23:11 GMT
Connection: keep-alive
ETag: "6351137f-300"
Accept-Ranges: bytes
realtimewin.com/raffle_boxes_gift_ntx/img_caixa/frente.png
46.101.99.16200 OK 4.4 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img_caixa/frente.png
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash 57d0bad7abeaf9db189630eccfe040b6
2d2d12e59be43514915c535052a00a8b297c3f2c
eb53c312d70309e36e97ab3223904a90808d9636f5a0a93d651fb763a9e75f9a
GET /raffle_boxes_gift_ntx/img_caixa/frente.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Cookie: _ga_4530RD5FPC=GS1.1.1669325999.1.0.1669325999.0.0.0; _ga=GA1.1.1259350550.1669326000; vl-cep=cep=WWonqPDNRdoeQzEWlyIaW2YxBQtw40oInN3iu7BXnI7x0qFxUYDtpvDNfDw8klJJitn4CZUHqPaarm2lp5k9n1mntFUIjkJHAnELQYDMUxEIstvS2ARURdekNNJK0f5wDkKa5dsCicPaBjweNMfKvOHrgG4H9sPIeqfpJPl2RT3JrZOO7mPOiIFZMIxJ8GGezdEI81ybGAB0EIY6EovcOC24z2WTrkf1j_vSMB5o2adkOyub4o6N3td7JAHwRrMvIejg6AcDkc48c9Ls02SVNQbNGpzwNX8YooFT8wOzsO65BtkDvJRCzhxS1FIZdPvoopvUNiX5OgbZduUrWf-KqsepGitP_ELJbu_o21x0WGc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:00 GMT
Content-Type: image/png
Content-Length: 4400
Last-Modified: Thu, 20 Oct 2022 09:23:11 GMT
Connection: keep-alive
ETag: "6351137f-1130"
Accept-Ranges: bytes
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2173
Cache-Control: max-age=129782
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 21:40:00 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 09:43:02 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
realtimewin.com/raffle_boxes_gift_ntx/img_caixa/conteudo.png
46.101.99.16200 OK 18 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img_caixa/conteudo.png
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash 4906b9b619deec90a452ba8c5f1aec89
a218c23d6ce91ef4daabc18345dc00e68ef60b46
19ac70c2382cd4a108b45791b6af1a3648ed6efbbccced02db449d78c8b1c75a
GET /raffle_boxes_gift_ntx/img_caixa/conteudo.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Cookie: _ga_4530RD5FPC=GS1.1.1669325999.1.0.1669325999.0.0.0; _ga=GA1.1.1259350550.1669326000; vl-cep=cep=WWonqPDNRdoeQzEWlyIaW2YxBQtw40oInN3iu7BXnI7x0qFxUYDtpvDNfDw8klJJitn4CZUHqPaarm2lp5k9n1mntFUIjkJHAnELQYDMUxEIstvS2ARURdekNNJK0f5wDkKa5dsCicPaBjweNMfKvOHrgG4H9sPIeqfpJPl2RT3JrZOO7mPOiIFZMIxJ8GGezdEI81ybGAB0EIY6EovcOC24z2WTrkf1j_vSMB5o2adkOyub4o6N3td7JAHwRrMvIejg6AcDkc48c9Ls02SVNQbNGpzwNX8YooFT8wOzsO65BtkDvJRCzhxS1FIZdPvoopvUNiX5OgbZduUrWf-KqsepGitP_ELJbu_o21x0WGc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:00 GMT
Content-Type: image/png
Content-Length: 17935
Last-Modified: Thu, 20 Oct 2022 09:23:10 GMT
Connection: keep-alive
ETag: "6351137e-460f"
Accept-Ranges: bytes
notix.io/event
139.45.240.92200 OK 0 B IP 139.45.240.92:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:39:52 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
realtimewin.com/raffle_boxes_gift_ntx/img/locker.png
46.101.99.16200 OK 346 B URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img/locker.png
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 21 x 21, 8-bit colormap, non-interlaced\012- data
Hash bbffb119496dd210a5eb7ee0368ac16e
e15889dbb41454983c5725f59f58fbc1b0a8ecc0
97569eec069e174a99e68dcbd64f0398ca7ae5deeabcde06948d170420d2d6cd
GET /raffle_boxes_gift_ntx/img/locker.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Cookie: _ga_4530RD5FPC=GS1.1.1669325999.1.0.1669325999.0.0.0; _ga=GA1.1.1259350550.1669326000; vl-cep=cep=WWonqPDNRdoeQzEWlyIaW2YxBQtw40oInN3iu7BXnI7x0qFxUYDtpvDNfDw8klJJitn4CZUHqPaarm2lp5k9n1mntFUIjkJHAnELQYDMUxEIstvS2ARURdekNNJK0f5wDkKa5dsCicPaBjweNMfKvOHrgG4H9sPIeqfpJPl2RT3JrZOO7mPOiIFZMIxJ8GGezdEI81ybGAB0EIY6EovcOC24z2WTrkf1j_vSMB5o2adkOyub4o6N3td7JAHwRrMvIejg6AcDkc48c9Ls02SVNQbNGpzwNX8YooFT8wOzsO65BtkDvJRCzhxS1FIZdPvoopvUNiX5OgbZduUrWf-KqsepGitP_ELJbu_o21x0WGc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:00 GMT
Content-Type: image/png
Content-Length: 346
Last-Modified: Thu, 20 Oct 2022 09:23:09 GMT
Connection: keep-alive
ETag: "6351137d-15a"
Accept-Ranges: bytes
notix.io/event
139.45.240.92200 OK 0 B IP 139.45.240.92:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:39:52 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
notix.io/event
139.45.240.92200 OK 15 B IP 139.45.240.92:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 63
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:39:52 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
139.45.240.92200 OK 15 B IP 139.45.240.92:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 76
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:39:52 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
139.45.240.92200 OK 15 B IP 139.45.240.92:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 85
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:39:52 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
139.45.240.92200 OK 15 B IP 139.45.240.92:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1423
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:39:52 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
push.services.mozilla.com/
52.24.78.9101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.24.78.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aXdJaymgsXts1RZ/2Duj/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 94W4XTxgaaFHXP2rWr3xBq27gCY=
region1.google-analytics.com/g/collect?v=2&tid=G-4530RD5FPC>m=2oeb90&_p=1013944410&cid=1259350550.1669326000&ul=en-us&sr=1280x1024&_s=1&sid=1669325999&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fraffle_boxes_gift_ntx%2F%3Fcep%3D9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o%26lptoken%3D166e693f3244779e999e&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-4530RD5FPC>m=2oeb90&_p=1013944410&cid=1259350550.1669326000&ul=en-us&sr=1280x1024&_s=1&sid=1669325999&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fraffle_boxes_gift_ntx%2F%3Fcep%3D9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o%26lptoken%3D166e693f3244779e999e&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-4530RD5FPC>m=2oeb90&_p=1013944410&cid=1259350550.1669326000&ul=en-us&sr=1280x1024&_s=1&sid=1669325999&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fraffle_boxes_gift_ntx%2F%3Fcep%3D9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o%26lptoken%3D166e693f3244779e999e&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://realtimewin.com
date: Thu, 24 Nov 2022 21:40:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
realtimewin.com/raffle_boxes_gift_ntx/img_caixa/caixa.png
46.101.99.16200 OK 10 kB URL HTTP/1.1 realtimewin.com/raffle_boxes_gift_ntx/img_caixa/caixa.png
IP 46.101.99.16:0
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash b862489ea579cccb7c88f4661ca30376
35f2ecb293bd972a4e0d108b6f29d12d0ea9fbbd
37121efcc76a8737ff0b72544dd622b175f681e81b73ed94ae2ff78fbd066cb9
GET /raffle_boxes_gift_ntx/img_caixa/caixa.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/raffle_boxes_gift_ntx/?cep=9vXoBZhXK5AcD3qcYTGxZPKa7jHRH9C8TZs5rcSi4bABeWVFIlaVv70ChszWodJv9_haGuigVRAxzaP8xFqbQJDAsrsuD1lTBBQtTUkGdYn_WBGHiQt0sjU_mf63tf4RagvJAkkpPDyVW8XgLkXrOFtopl3W4EL-HOfwB__KpDr0ops4jXPhicuxtFaO_QjzXvqsOEkyXSg4nLZOOGCrRVM4oekH097YoGCa1ql-5FPIISdcf6MWsIp0_d3twVCJUuoqLPxER8Mgcdpt-nSNA1oo9hnNOvIUekX7fzbQt0aAo-QuYZFMRhhONcSbH1GEHTY745UwmVkV-xP4o3gssbpJwieswhYz3p5FHCCJ21o&lptoken=166e693f3244779e999e
Cookie: _ga_4530RD5FPC=GS1.1.1669325999.1.0.1669325999.0.0.0; _ga=GA1.1.1259350550.1669326000; vl-cep=cep=WWonqPDNRdoeQzEWlyIaW2YxBQtw40oInN3iu7BXnI7x0qFxUYDtpvDNfDw8klJJitn4CZUHqPaarm2lp5k9n1mntFUIjkJHAnELQYDMUxEIstvS2ARURdekNNJK0f5wDkKa5dsCicPaBjweNMfKvOHrgG4H9sPIeqfpJPl2RT3JrZOO7mPOiIFZMIxJ8GGezdEI81ybGAB0EIY6EovcOC24z2WTrkf1j_vSMB5o2adkOyub4o6N3td7JAHwRrMvIejg6AcDkc48c9Ls02SVNQbNGpzwNX8YooFT8wOzsO65BtkDvJRCzhxS1FIZdPvoopvUNiX5OgbZduUrWf-KqsepGitP_ELJbu_o21x0WGc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 24 Nov 2022 21:40:01 GMT
Content-Type: image/png
Content-Length: 10457
Last-Modified: Thu, 20 Oct 2022 09:23:10 GMT
Connection: keep-alive
ETag: "6351137e-28d9"
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3623
Expires: Thu, 24 Nov 2022 22:40:24 GMT
Date: Thu, 24 Nov 2022 21:40:01 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3623
Expires: Thu, 24 Nov 2022 22:40:24 GMT
Date: Thu, 24 Nov 2022 21:40:01 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3623
Expires: Thu, 24 Nov 2022 22:40:24 GMT
Date: Thu, 24 Nov 2022 21:40:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4157f2c5c3c77ce699324ecb08f47c7
a7d9135f9d01ba13c3cdaf8b038c70212f159297
2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:03:54 GMT
age: 84967
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ve4q5FDkwMGhPK6ZVVVCZtoBTaGaz43r_PwINzwS5Nx5tcZeQkVIfw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:47 GMT
age: 85814
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:06 GMT
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
age: 85975
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:14:07 GMT
age: 51954
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0856fdb55f19f03a1bec38b3d6e0ac77
89accd230fba95fe0049678070817b36ead015fa
17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8rbsN9OVJmneT9ov-Q7V4RB8DP5UWhhn-7cnukHiBpl06zmMM0zJTg==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:57:20 GMT
age: 85361
etag: "89accd230fba95fe0049678070817b36ead015fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:15:22 GMT
age: 51879
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
172.64.202.28200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
IP 172.64.202.28:0
GET /releases/v5.15.4/css/free.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 21:40:00 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 20e9ac2e933b363bb35ea6c61802dc9a.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: GmpWUMkx1_JHSTinRZFvoFKe7WbGD0motNHWCkiYnZNrMUirufhrsg==
age: 3760651
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DqwHK7jZ9VhKwvOT8VRtawYRE8N1fmcq6aRyS5RBPXfdAE7%2B4rd%2B5GG2KsCIT6X5GeULE8UKAm20LlFHaVLMDb10GUim%2B%2F%2F4C317UiN8sHV1moK3leNav3fF07gtbX695CaN%2BWWR1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f54cee1d3788bf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
172.64.202.28200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
IP 172.64.202.28:0
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 21:40:00 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8d36edc1ce736c158ddedbd7365e2a8e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: t8ar8hKnh0XDMGvez4E7m-L4GBD3Y9U6Z-cArMiPmnW7HqzdXWq4Mw==
age: 3699323
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nmeEl9Dw4qOiRF3urDHRLqIO8pjYE7GW4HoofGjV1uplhQJ2pRAfcT3U9WU0iWn7YYFK81B58kdyhKNt46jnEL%2Bnz31n6QNoZa38gZdnMAi3h8%2B1j%2BKqUwYiKAj9NNtwTeR91Robvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f54cee2d5588bf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
104.18.11.207200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
IP 104.18.11.207:0
GET /bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 21:40:00 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7fd2f04e75bd7ab1a79d80cdd4c33085"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 11/15/2022 10:39:27
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1054
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 919ecc8be24f8b090981338a1e0632d7
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76f54cebff4fb506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
notix.io/ent/current/enot.min.js
139.45.240.92200 OK 0 B URL HTTP/2 notix.io/ent/current/enot.min.js
IP 139.45.240.92:0
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 21:39:52 GMT
content-type: application/javascript
last-modified: Mon, 21 Nov 2022 10:07:35 GMT
etag: W/"637b4de7-126a5"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
kit.fontawesome.com/7deea0368b.js
104.18.22.52200 OK 0 B URL HTTP/2 kit.fontawesome.com/7deea0368b.js
IP 104.18.22.52:0
GET /7deea0368b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 21:40:00 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyeOi5eUWKFumrWJ9_tB
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 76f54cec0b760b06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2