track.supercosmo.xyz/208e8845-faab-44a0-a422-e6a4cf042a13
302 0 B URL HTTP/1.1 track.supercosmo.xyz/208e8845-faab-44a0-a422-e6a4cf042a13
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /208e8845-faab-44a0-a422-e6a4cf042a13 HTTP/1.1
Host: track.supercosmo.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Tue, 07 Feb 2023 04:11:21 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Pragma: no-cache
Set-Cookie: 208e8845-faab-44a0-a422-e6a4cf042a13-v4=LMACAiy_GkEENcU-V6Og3ulS5Ba1h1YTRXVEqriDIss; Max-Age=86400; Expires=Wed, 08-Feb-2023 04:11:21 GMT; Domain=track.supercosmo.xyz; Path=/; HttpOnly
cep-v4=BZLZIT5rmXo6dAVCOEemxlSGb-Hdftju8VQxgwUUVjodzRMOMVp4H01Oej8iCCdCAry1etQglGGAb5BuuRZQObXyAfn9JA26VNlaB6w9gfwTw-_V9MmaK6SfrY_EjB0oaYQtIpIkD-RuGb9zN36wdXwLcQDJl5EyDn14wL2RRsGE9v_GkFkSciu4UQIrkxRa9p6AHzbrzMtnyXOoRxzTvMWgvTyKK4wt2UewCXB4ESyZZpxvtPr2wt77Uzfo-UZ2LHbFY0JKHve5JLEQrzuMOzLdh2YLpmx3NDrh_iOUrhmsrsM0CuMlap5tjHgKyKKoEKmE4iCtb8tpPKuWP_UbSXPFGrf9Dq65W4BGxP6-0Oy08Rb7EFNUtfd2nhIvR1QQAzd6CTQKwM91wgr5kQu2DQ; Max-Age=86400; Expires=Wed, 08-Feb-2023 04:11:21 GMT; Domain=track.supercosmo.xyz; Path=/; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18556
Expires: Tue, 07 Feb 2023 09:20:38 GMT
Date: Tue, 07 Feb 2023 04:11:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2217
Expires: Tue, 07 Feb 2023 04:48:19 GMT
Date: Tue, 07 Feb 2023 04:11:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 03:34:06 GMT
content-type: application/json
age: 2236
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9893
Expires: Tue, 07 Feb 2023 06:56:15 GMT
Date: Tue, 07 Feb 2023 04:11:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: B0eXZxCmvyZd8nEcew4IdP695ZsmpP1DtPuo2UT0TPFtdgJ6TNb3gK5LUWn5M02I+vlvSFP+smU=
x-amz-request-id: S0J16XZWTH6KC15E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 03:35:22 GMT
age: 2160
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/i14wheel.jpg
200 OK 42 kB URL HTTP/2 zmforever.digital/alwheelpropzm/i14wheel.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 501x501, components 3\012- data
Hash 96609fbcc5f804cbe893946051325dbe
3f5a28fd0d29224836399ab8f4955c66046cd7bc
cb4e4f2e6895ba24c0ee34b0404cab1de81dfa3440b54e85a3f92e072da27b8a
GET /alwheelpropzm/i14wheel.jpg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 42443
last-modified: Thu, 03 Nov 2022 01:25:50 GMT
etag: "a5cb-5ec86d660e380"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/style.css
200 OK 3.1 kB URL HTTP/2 zmforever.digital/alwheelpropzm/style.css
IP
Hash 99b85d67fb14279268c18e1fd8e4d61f
5683695268a0b9c4f02cad1f54825b5721a273b4
cbbafd84b2d9f228e79cfd8fec4531fa6abdbfd27323b6773b22553af33dd1fe
GET /alwheelpropzm/style.css HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 09 Jan 2022 12:10:13 GMT
etag: W/"3a51-5d5251a29b340"
content-encoding: br
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/notify_2x.png
200 OK 229 B URL HTTP/2 zmforever.digital/alwheelpropzm/notify_2x.png
IP
File type PNG image data, 36 x 32, 8-bit gray+alpha, non-interlaced\012- data
Hash 988234626ae7a880ed9c6a92f6336c0f
173967c2b59baed4a06997d874aba32ab65da201
4566dd8f59a09f51415a7c8955f48f75298522fc6db554bc1a59ad79c3e3e314
GET /alwheelpropzm/notify_2x.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/png
content-length: 229
last-modified: Sun, 09 Jan 2022 11:58:38 GMT
etag: "e5-5d524f0bcd780"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/spin_prize2.png
200 OK 2.8 kB URL HTTP/2 zmforever.digital/alwheelpropzm/spin_prize2.png
IP
File type PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data
Hash f278c8d30fc51b72e0774b9ecb49214c
03b574db82b31ee5758eb5093fda8ea25d1b00d8
43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c
GET /alwheelpropzm/spin_prize2.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/png
content-length: 2814
last-modified: Sun, 09 Jan 2022 11:43:52 GMT
etag: "afe-5d524bbed8e00"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/action_icons_20px_2x.png
200 OK 1.7 kB URL HTTP/2 zmforever.digital/alwheelpropzm/action_icons_20px_2x.png
IP
File type PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Hash b699975b5fe73b087e711a33ff24ee1e
0e33cc5c32a5e7d18440751e3946076664caaf53
4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
GET /alwheelpropzm/action_icons_20px_2x.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/png
content-length: 1726
last-modified: Sun, 09 Jan 2022 11:59:28 GMT
etag: "6be-5d524f3b7c800"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/comment_action_2x.png
200 OK 641 B URL HTTP/2 zmforever.digital/alwheelpropzm/comment_action_2x.png
IP
File type PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data
Hash e9b3872b3e63e19728176d45f0aa6986
b638f89d5d80c4cd65327da973c52f778e30bd55
a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5
GET /alwheelpropzm/comment_action_2x.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/png
content-length: 641
last-modified: Sun, 09 Jan 2022 11:59:18 GMT
etag: "281-5d524f31f3180"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/i14phone.jpg
200 OK 562 kB URL HTTP/2 zmforever.digital/alwheelpropzm/i14phone.jpg
IP
File type PNG image data, 423 x 880, 8-bit/color RGBA, non-interlaced\012- data
Size 562 kB (561946 bytes)
Hash 3db6e9a86a250c13268be4a224a40333
63fdc9bdf962bd044cc99800e68a7c945298e05b
0f3a2e2e7f8ab18b9513fd334f82e227911e2f0f378ddc63b8b34347f12534c6
GET /alwheelpropzm/i14phone.jpg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 561946
last-modified: Mon, 24 Oct 2022 08:15:28 GMT
etag: "8931a-5ebc364eda800"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/index.jpg
200 OK 5.8 kB URL HTTP/2 zmforever.digital/alwheelpropzm/index.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 203x249, components 3\012- data
Hash 038a492cc0a3488f0547dafc24c15838
e49b0adb8e08131c54b71c3325b8e9cb9ce716f9
e25ba7e0c1b7e4bb61773bd32df4cf010a0d6c65e773fcc2bdc3454edf3401c0
GET /alwheelpropzm/index.jpg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 5846
last-modified: Fri, 04 Nov 2022 00:21:47 GMT
etag: "16d6-5ec9a0f28bcc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/14.jpg
200 OK 6.3 kB URL HTTP/2 zmforever.digital/alwheelpropzm/14.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 165x212, components 3\012- data
Hash 83dea2fa1f2cff1c3c228260b4bbef9f
069c3bb290335ec373202bd52e9b064a372acf5d
64b10a435c7d01c123b1ad3c5b6c2a3a66b95e0dd5601d6c6b5bcb786881beca
GET /alwheelpropzm/14.jpg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 6271
last-modified: Thu, 03 Nov 2022 01:26:51 GMT
etag: "187f-5ec86da03acc0"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
200 OK 4.8 kB URL HTTP/2 zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 10c7203100d2c6bb90d98c36e3704170
f17508420bc4976daee78b6cbf02a9846a8967f6
e7a320b3a8bc64a1192667fcbe1ca604b88e371a7b907e510fe78ed849c52470
GET /alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sat, 04 Feb 2023 19:29:52 GMT
etag: W/"3b09-5f3e4d26cec00"
content-encoding: br
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/like_user_2.jpeg
200 OK 1.2 kB URL HTTP/2 zmforever.digital/alwheelpropzm/like_user_2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash f9299c2023539a8f27a6e1b12ed260e5
046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2
ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/like_user_2.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 1216
last-modified: Sun, 09 Jan 2022 11:40:54 GMT
etag: "4c0-5d524b1517d80"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/7.jpeg
200 OK 1.1 kB URL HTTP/2 zmforever.digital/alwheelpropzm/7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 93a68c406cecabf85d9cca80150cff97
cb051ce9d579bc5886afc137ec9ff4a42e4fbbc4
8b55e2390a6206d5bbc8947c9003c1381e64a064239c0aa757826683b168d755
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/7.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 1111
last-modified: Sun, 14 Apr 2019 06:25:01 GMT
etag: "457-58677987b4940"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/2.jpeg
200 OK 1.2 kB URL HTTP/2 zmforever.digital/alwheelpropzm/2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash dba9ae7a7ddca56332daa3db554873ee
42c44132ec0e635fbd95b431c49c01345c963bcf
6d52f1bed6a64a89473c9b39f74c4900b8534a75d52e6bb4785d8c9046d12b8e
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/2.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 1154
last-modified: Sun, 14 Apr 2019 06:25:56 GMT
etag: "482-586779bc28500"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/3.jpeg
200 OK 1.1 kB URL HTTP/2 zmforever.digital/alwheelpropzm/3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 8d0a835746e47abd0e612753cd3b8500
adbb56e921d194390557dbb9afbfea9ffc29f81a
a9ab01d3ccd9fad247c4d19343f45a1de228542b166e5cfe6dd0c2a613ddd064
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/3.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 1129
last-modified: Sun, 14 Apr 2019 06:26:10 GMT
etag: "469-586779c982480"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/6.jpeg
200 OK 1.3 kB URL HTTP/2 zmforever.digital/alwheelpropzm/6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 8224e96358b5f3cff15b5a95dda8bf16
159b632deb160c901c9b8754715272a070c1945b
c67dfaceacc0ecf671300a3636ae7d464d873385a9077f3fa207f4053b681dfc
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/6.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 1314
last-modified: Sun, 14 Apr 2019 06:26:44 GMT
etag: "522-586779e9ef100"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/1.jpeg
200 OK 1.1 kB URL HTTP/2 zmforever.digital/alwheelpropzm/1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 04ab47334cf6507aba4897fc6184fad3
bf1018551225f851a7620e3abf84567c11e24edb
1f4e1ed5e3694cd7c748c27a2081cf05ab76866b945d55ce8a7cf8c21c424fda
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/1.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 1051
last-modified: Sun, 14 Apr 2019 06:25:39 GMT
etag: "41b-586779abf1ec0"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/8.jpeg
200 OK 1.4 kB URL HTTP/2 zmforever.digital/alwheelpropzm/8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 2f1e9ab76a99474f6ab6e56f6f9609d1
6913bd46092337f0398ee3e2a964406fcee7bb8e
1e31e659dabaaa79c7efa58b72d2e982e7598db298084cd2865e354425287330
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/8.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 1377
last-modified: Sun, 14 Apr 2019 06:25:20 GMT
etag: "561-58677999d3400"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/clip_footer_3.png
200 OK 2.5 kB URL HTTP/2 zmforever.digital/alwheelpropzm/clip_footer_3.png
IP
File type PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data
Hash e1b626392882cc25b4d891afaa68afd4
454d7abdbc2548d04feb95436ea0ab4126b4f00b
ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f
GET /alwheelpropzm/clip_footer_3.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/png
content-length: 2460
last-modified: Sun, 09 Jan 2022 11:56:02 GMT
etag: "99c-5d524e7707880"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/footer_right.png
200 OK 4.9 kB URL HTTP/2 zmforever.digital/alwheelpropzm/footer_right.png
IP
File type PNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data
Hash 0e786b7344ac0b63609290a3a415fc4f
c2e77827e895aaa13522f1c5c0ef79d4caef0bb2
f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5
GET /alwheelpropzm/footer_right.png HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/png
content-length: 4919
last-modified: Sun, 09 Jan 2022 11:55:53 GMT
etag: "1337-5d524e6e72440"
accept-ranges: bytes
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/4.jpeg
200 OK 1.3 kB URL HTTP/2 zmforever.digital/alwheelpropzm/4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 2d7f012ab9054524c755b469917c86c4
4012a215511c950261b9a612ea9a504f01e785bc
c8159e3c4734f421942fa3cabec5481d80500e395b1652f22dbd18aa1150ea4f
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/4.jpeg HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: image/jpeg
content-length: 1268
last-modified: Sun, 14 Apr 2019 06:26:30 GMT
etag: "4f4-586779dc95180"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 95a5f510f2e23c2313a0caf5f5eaa417
86b7aa8ba904a128db23fc1fdaf4f654120a7796
6f5d8b5beff337e77eacb3b353ce23b3cf9036a502fda552481c0634b6605e20
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F5D8B5BEFF337E77EACB3B353CE23B3CF9036A502FDA552481C0634B6605E20"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 07 Feb 2023 10:11:22 GMT
Date: Tue, 07 Feb 2023 04:11:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 03:51:19 GMT
age: 1203
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
deefauph.com/zone?&pub=0&zone_id=5545814&is_mobile=false&domain=zmforever.digital&var=&ymid=&var_3=&dsig=&action=prerequest
200 OK 0 B URL HTTP/2 deefauph.com/zone?&pub=0&zone_id=5545814&is_mobile=false&domain=zmforever.digital&var=&ymid=&var_3=&dsig=&action=prerequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=5545814&is_mobile=false&domain=zmforever.digital&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zmforever.digital
Connection: keep-alive
Referer: https://zmforever.digital/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-length: 0
x-trace-id: 3e5041ddc250340203f0161500e206ac
access-control-allow-origin: https://zmforever.digital
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16535
Expires: Tue, 07 Feb 2023 08:46:58 GMT
Date: Tue, 07 Feb 2023 04:11:23 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lSRLBUvfm9JJi2ne9E6BYA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UBSUPRU+MmztvHZGoyWVsfxWmTQ=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5613
Expires: Tue, 07 Feb 2023 05:44:57 GMT
Date: Tue, 07 Feb 2023 04:11:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5613
Expires: Tue, 07 Feb 2023 05:44:57 GMT
Date: Tue, 07 Feb 2023 04:11:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15169
Expires: Tue, 07 Feb 2023 08:24:13 GMT
Date: Tue, 07 Feb 2023 04:11:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15169
Expires: Tue, 07 Feb 2023 08:24:13 GMT
Date: Tue, 07 Feb 2023 04:11:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15169
Expires: Tue, 07 Feb 2023 08:24:13 GMT
Date: Tue, 07 Feb 2023 04:11:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8328b9-b592-4c76-9101-54f0b2e220d0.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8328b9-b592-4c76-9101-54f0b2e220d0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 284a62b098827c448218892eb5a732f9
6679d1ff8f2986b6103e94a54632892e2280b149
17332bece792a4e8d571b5161145ef2105abc513e140c738885899401b9c8d14
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c8328b9-b592-4c76-9101-54f0b2e220d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14943
x-amzn-requestid: 1145ff12-5237-426c-8efc-c25c1061bcce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f2GpMFTEIAMFxgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63df1e3a-528eb972059e86c33334fedd;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 03:10:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: l4_Oe4gR-lLAFdTXTUvw2TCtg5D6X2P1ELocQ53QHK9s3vj30oacAA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 04:02:48 GMT
age: 516
etag: "6679d1ff8f2986b6103e94a54632892e2280b149"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3cd20c6639e2b0d996fbbd7df2d4f47
2e54c22fb83981e2690161cd521e4fc3998e9c16
9b2b1f3e062fca74341d09540e44d2a02ec451b8349440ed5917073e8fab988d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32cb7a16-13bc-4d42-8e17-7be2a40cfc82.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6316
x-amzn-requestid: 1988058c-5aee-4964-9046-83a5f14a927d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwhjnFdxoAMFgpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dce2e3-5ec35d0d6bef4d4944c629c0;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 10:33:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Z9b1A_GpinQXvbA-g2PoKhVSNVd5gMrId0WUTmKSCkg-YAan1dtp-w==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 22:21:35 GMT
age: 20989
etag: "2e54c22fb83981e2690161cd521e4fc3998e9c16"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf292b03a5db7eb8e0660a518f41233c
8fa486cdecffff8a663da2df88227ee784c298a2
cfc5efb92068bdeeda5c95f9851213b14afa76776486d0493cf4c05b30453cf0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5634
x-amzn-requestid: c380f2eb-c707-4086-9646-179ea89ba210
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fy9JKEpqoAMF9RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dddbd4-49510561740468ba7b39f211;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 04:15:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ofAz9sRlztBs3zypgsL9DkiJypsxagC7ZcUX3PLL_7FzUALp_MxtKA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 18:44:39 GMT
age: 34005
etag: "8fa486cdecffff8a663da2df88227ee784c298a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 003fc35e140a75a12b7795c3986426ec
da002b22e2a01f48a545b369d4403eabb17a10d5
bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13160
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVxSHh7IAMFjAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bJYqqLcSFAGcCVUbjfI8yrsb54Bj8uQKHBYp8tpZWUoUGE9C-iP76A==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 07:12:46 GMT
age: 75518
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6154ab9-bb20-4d77-a86e-15f604bb237a.webp
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6154ab9-bb20-4d77-a86e-15f604bb237a.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4dd67c975f1c1f91ca92f37c9e098231
b9096efb56b6e196b13722e767a9d2762737cbb9
39f21e5db4089d6cf94646b76cd9032e9831ed03f7c2f0d980fac09c893a52db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6154ab9-bb20-4d77-a86e-15f604bb237a.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8110
x-amzn-requestid: fdfa4af0-a6e4-4664-a86b-48fd6f374d96
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77JCFyzoAMFtyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17239-205cdd9d70f23cb358c65222;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:33:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zHo_IPM2j3t4prd4ZuLR7c-GPrWHxSxqSUprBxrT9n_DG8ySpkpb8g==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:46:30 GMT
age: 23094
etag: "b9096efb56b6e196b13722e767a9d2762737cbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59419fb1cf4689bed183d0e9a6aed782
47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a
e6009407bd61bee1ae16ec30ea5914be77c56ee65dfb30595b10a1cedc6798c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12682
x-amzn-requestid: d858d90a-b1ca-401c-8e00-8ccd9c0a7504
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78mUEsfIAMFreg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1748e-2783de3e3de9c520246bf06e;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:43:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: eq8Kle9uYWJ3vmaJD50r-oaTb_O2ObQgLNlTcYn9XQoHCyAO3isqyQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:44:49 GMT
age: 23195
etag: "47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
zmforever.digital/favicon.ico
404 Not Found 0 B URL HTTP/2 zmforever.digital/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
zmforever.digital/alwheelpropzm/main_script.js
200 OK 0 B URL HTTP/2 zmforever.digital/alwheelpropzm/main_script.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /alwheelpropzm/main_script.js HTTP/1.1
Host: zmforever.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/alwheelpropzm/index.html?browser=Firefox&cep=JcXTd5o8PnVyvuFSE9EBA2y15FpG8F0FJKcQpU4v-ns74SHuo0yzCT6yUI3jS6g178dC9ilpm1inTukRChikq7stEhlCatoTRu9Ypvq4Sc-rirsR9GbB1lPRZ-GovOCD8o6EJMTGbejX0layIeqRq-EabUXdmHUkhVpJ1SchzwZfdZ3bynggTeCU4lY5H3e1Vvdkz2t_0JVMnuHTrh4gXee9Od0_uDy1fW0fQa1B5XejrP0dlEDBeT2iV6gX8ZGwNQiuhs8WZK7giLhkcbcZCFsf2kfnqKgCxs5Gl4DDPo1Eb9FO-9u6e2LggMVu1r_8vwHoRkQ_wsDrA6LyxZLdRU_r1I1101tMJgTmT0FyZ05IYaZ9gtUhcFpV7R-76kF7qNPdPM2YUQiJGOPS_DLg4Q&lptoken=16bf757a74c3487b81ae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sun, 29 Jan 2023 15:17:15 GMT
etag: W/"b2c-5f36897f334c0"
content-encoding: br
X-Firefox-Spdy: h2
deefauph.com/pfe/current/micro.tag.min.js?z=5545814&sw=/sw-check-permissions-d7d09.js
200 OK 0 B URL HTTP/2 deefauph.com/pfe/current/micro.tag.min.js?z=5545814&sw=/sw-check-permissions-d7d09.js
IP
GET /pfe/current/micro.tag.min.js?z=5545814&sw=/sw-check-permissions-d7d09.js HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zmforever.digital/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 04:11:22 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 11:03:52 GMT
etag: W/"63d3af98-a083"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
18.192.108.151
35.241.9.150
217.69.13.14
95.101.11.115
139.45.197.251