officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
200 OK 4.5 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2918)
Hash 6de158a2ba14d012d1d3a54f1d08f16d
d781f065592630797748c93d2b55fe5404218182
5f15162388e902b8a9d16c1a5d36bb55ab8f2f0e456c5c6695eb0efeec9503e5
GET /1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 07 Jan 2023 06:06:37 GMT
ETag: W/"9db191da2a76d77cae8a96be776fa095"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2Rp-HgIrtJQd6Q5M5DjXGNr5vKwu9HGBoy_By_SSzH4wLT_znMrpGw==
Age: 57327
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b782882bdabaf3b08e64120922b4a4b7
2035ed7fc9fb5b6ee9715601ba43de5f94d0c0e9
3fe7d1a9a55b86ec25d02634749ccfae11f3477033ba8cd7ac4131b7948ba619
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4933
Expires: Sat, 07 Jan 2023 23:24:16 GMT
Date: Sat, 07 Jan 2023 22:02:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 516b9d6951b09439a51d5284994ed92f
5c78edb38bae36caa8e2db8ed6635a32e46c91dd
eaaf4ebc59d2a06d02b552154c5adb7c713ffc4a7f5caabcff1c2b4cd6ec5c7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18438
Expires: Sun, 08 Jan 2023 03:09:21 GMT
Date: Sat, 07 Jan 2023 22:02:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 600f7ba6e1a6fbbd176cd2df19b1e4d9
cdd72b25fd91ee980aba193b12e890096e4fe852
860214860947dfbe26099f018747154823b175fceb2821a390cc655da191a6d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "860214860947DFBE26099F018747154823B175FCEB2821A390CC655DA191A6D0"
Last-Modified: Thu, 05 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4561
Expires: Sat, 07 Jan 2023 23:18:04 GMT
Date: Sat, 07 Jan 2023 22:02:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 07 Jan 2023 21:48:10 GMT
content-type: application/json
age: 834
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2H5RT9w/DHj2nr3gANcSzonY4yVD8UgTrEBSJaycvMFm4IOjbLlhAeXAn8MmyVxAg111jSFzVUM=
x-amz-request-id: EPG2HGA5HPC26EY0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 07 Jan 2023 22:00:34 GMT
age: 90
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
officialwinner.xyz/1/prizewheel/cash/iqcash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444
200 OK 1.1 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444
IP
File type ASCII text, with very long lines (3495), with no line terminators
Hash b5d6bcbd459b4f13fe313ed5f9a0aa4a
0215bc9bdac592dfbebf2fb8cf02111d31588f1d
528fe4fe650c7154022b249bb82e2681a1d1f745fd8401f84156d44df35b486e
GET /1/prizewheel/cash/iqcash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:43 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 07 Jan 2023 06:22:28 GMT
ETag: W/"cd41123a11e97e0f2444b57d180631a0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YnnJMyASVbgjOYsl35gns3K6kMjHRvWZ4ga7FDlqVisAi_qOQNZkXg==
Age: 56377
officialwinner.xyz/1/prizewheel/cash/iqcash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6
200 OK 53 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6
IP
File type ASCII text, with very long lines (65475)
Hash b5aa9ce87c14cfe1f349ad9dd8688aa4
da1aa3c5a8831e10c881377f6f9d7340b77a7c97
47db1ec1d4e34e2bc2e0d4d22228642036ebc5279879469d1b3bbb95909bfa18
Analyzer Verdict Alert fortinet Phishing
GET /1/prizewheel/cash/iqcash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6 HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sat, 07 Jan 2023 08:31:18 GMT
ETag: W/"cdf97653c213f02233f50a1ec975633c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HXucTgiZcdY8gki0VHYLcfPm0NvHq2U-Kw1a0fF6wAe8e2YA63A8UQ==
Age: 48647
officialwinner.xyz/1/prizewheel/cash/iqcash/css/app.css?id=c588c17324f2be0e0ec9
200 OK 33 B URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/css/app.css?id=c588c17324f2be0e0ec9
IP
File type ASCII text, with no line terminators
Hash c588c17324f2be0e0ec90a18f39e7d7c
69d360eddd15f527aac7f7e610346517732b7770
b83e8830b6b2f1253a78f90191cf1087e8fd7638831fd4c1376a7a6029297240
Analyzer Verdict Alert fortinet Phishing
GET /1/prizewheel/cash/iqcash/css/app.css?id=c588c17324f2be0e0ec9 HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 33
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:43 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 09:07:00 GMT
ETag: "c588c17324f2be0e0ec90a18f39e7d7c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: U8GKFAe8GLS_rpfXAPDJrmwDcpkvFU7u2XT51L8H2SmnJSkzUbZl3A==
Age: 46505
officialwinner.xyz/1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/notification.png
200 OK 449 B URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/notification.png
IP
File type PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data
Hash bd5203f2cc9e7a9125e4575e029541b0
9fa565ab2f4b55da4735b79e529562252b3c9afe
db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f
GET /1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/notification.png HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 449
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 07:42:17 GMT
ETag: "bd5203f2cc9e7a9125e4575e029541b0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Y6WBOAcmuXqBZWNnanV-wXW5GsL-BV5Ee3Ugj81b9nL6hm4G47Ai7Q==
Age: 51588
officialwinner.xyz/1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/prizewheel_spinner.jpg
200 OK 32 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/prizewheel_spinner.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3\012- data
Hash d4655cba21d806e849eed4e4119fbe1a
6453039d85005643e9d65074ca022f63b5d47cdd
90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7
GET /1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 32496
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 08:07:06 GMT
ETag: "d4655cba21d806e849eed4e4119fbe1a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 16JVuW2MSTKFt7di4recuZGD0uuSzM7d63wf7xK7YSglYWMeYYUc2g==
Age: 50099
officialwinner.xyz/1/prizewheel/cash/iqcash/js/app.js?id=15b1bae461854d516179
200 OK 977 B URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/js/app.js?id=15b1bae461854d516179
IP
File type ASCII text, with very long lines (977), with no line terminators
Hash 15b1bae461854d516179a34a8c9b5f08
330c1d191253fe07c5fe6b5af37872408f2e5904
1bd25e467ea078265aee433e0cf9732a7e127514304634590a2de17fb2330896
GET /1/prizewheel/cash/iqcash/js/app.js?id=15b1bae461854d516179 HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 977
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 08:59:02 GMT
ETag: "15b1bae461854d516179a34a8c9b5f08"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IkmvBvZxSemvgqYe7sf_4iuh-c30Uc4UqM9i7YHNI6YF6gkWohRzTg==
Age: 46983
officialwinner.xyz/1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/loader.gif
200 OK 5.1 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/loader.gif
IP
File type GIF image data, version 89a, 50 x 50\012- data
Hash ed786659a534e0d183c09a90c50abc9d
a6c3d90bfaa86a7cda490bc5d04c8939c31a414e
cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97
GET /1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/loader.gif HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 5083
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:46 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 08:07:04 GMT
ETag: "ed786659a534e0d183c09a90c50abc9d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YE_Rm6KMoBK-TUJIsjjqxchzUqqDobcZOPkrNSNlSReuqBB66486FQ==
Age: 50100
officialwinner.xyz/1/prizewheel/cash/iqcash/img/prizes/iphone-12-pro-max/default@0.5x.png
200 OK 57 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/prizes/iphone-12-pro-max/default@0.5x.png
IP
File type PNG image data, 250 x 179, 8-bit/color RGBA, non-interlaced\012- data
Hash 067843b7e5fadf09896c23cee6a28d1a
4a7863bc885fbbb8ab0274280ea51f5980413f68
82771bd4f119c328c192827cec6ba9edb36abbad8cf7887898cdecdf462b8258
GET /1/prizewheel/cash/iqcash/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 57361
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 06:46:52 GMT
ETag: "067843b7e5fadf09896c23cee6a28d1a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zgPh26_QyI-SH7DEDxIvbmbbhswi08j89x8BLurT6GKnS1yqPXBOKw==
Age: 54913
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 22:02:04 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
officialwinner.xyz/1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/prizewheel_static.png
200 OK 3.4 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/prizewheel_static.png
IP
File type PNG image data, 1002 x 1002, 4-bit colormap, non-interlaced\012- data
Hash dc484e0043b5ff6191b1880c8779863c
a5b67e3dff3dea3940eed090431aecbb36611b1d
30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6
GET /1/prizewheel/cash/iqcash/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3370
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 05:05:28 GMT
ETag: "dc484e0043b5ff6191b1880c8779863c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5EFZClCf2JfuAQOeXizCVsMCgFKiAlCFJZXId1nhsLQuxNwvkSymaA==
Age: 60997
officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/female/6@0.25x.jpg
200 OK 3.0 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/female/6@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 5f6bc62e6e66a94b4ce9b971a798ceff
05faaed9dbd1a5462485d4deeed888312a3b4973
cfa55f5831710c40e2429ec2528b080fb2e6b11b560abfa8eaa1710b63770af3
GET /1/prizewheel/cash/iqcash/img/profiles/mena/female/6@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2950
Connection: keep-alive
Date: Sat, 07 Jan 2023 04:42:12 GMT
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
ETag: "5f6bc62e6e66a94b4ce9b971a798ceff"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0HW_Wjnw7y6YspMGOf_gajuOCj5pYfGAdYLUgwX9lCaXjGddOAbigA==
Age: 62393
officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/female/3@0.25x.jpg
200 OK 2.5 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/female/3@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash e69e56799051d24a67414a67301ac984
7d7db0281213342c25abf9e08937e38c7d1e8449
cff50b269e3afdcf620ba9a8f6d3ac55b03a953136f3148d1b3296798bf57210
GET /1/prizewheel/cash/iqcash/img/profiles/mena/female/3@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2506
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 05:05:28 GMT
ETag: "e69e56799051d24a67414a67301ac984"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YHBdnuauM4wOrM1hamgRQF-yB4CQumh8iBhe8NObIGaMW8IjPULKig==
Age: 60997
officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/female/5@0.25x.jpg
200 OK 2.8 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/female/5@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 6063e3355d6e928b55810c359ee1d382
a6a19cb61b8a8f9ed538a6467a7a41ed85fc01ad
9db1c16bd8c27942b3d83cff9d81462ced2b7827ab45fe53ff3fcec32ed138d9
GET /1/prizewheel/cash/iqcash/img/profiles/mena/female/5@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2787
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 05:05:29 GMT
ETag: "6063e3355d6e928b55810c359ee1d382"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _4a84Shl_JSn6miRcahFWqAWoQuoOPcccfW-1Pf0lwjSTLiBM5w6vQ==
Age: 60996
officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/male/2@0.25x.jpg
200 OK 2.3 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/male/2@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 07ee3d87dba4f97110c83432fcc8f3f6
80f21d2258991eaecca028683f58b16019bf9deb
50479fd6ff7c08b64aa01f0a415bba20d8ddd79a43becae604955e9086098cff
GET /1/prizewheel/cash/iqcash/img/profiles/mena/male/2@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2258
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 04:24:36 GMT
ETag: "07ee3d87dba4f97110c83432fcc8f3f6"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HVXoiJ3oUTQboPqMBg6XuvtGMl8Irg0F9W4xtCvYbJVPRJNGxclrWw==
Age: 63449
officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/male/3@0.25x.jpg
200 OK 3.3 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/male/3@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 49f1b40f2ed2ef127cb64293ae8b1524
7939aacf51d0ba9b4358cb17ef40eb91fa31e27b
c5e6dbfaac2e982618aa4ea88a1785ca965b57f3149551f194cdaae2d8406a53
GET /1/prizewheel/cash/iqcash/img/profiles/mena/male/3@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3301
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 05:05:28 GMT
ETag: "49f1b40f2ed2ef127cb64293ae8b1524"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9DLZCvCDA6a2u2AJ855I3aYjKGdeuAP4vwUICFWyD0fCj28yvm-SxA==
Age: 60997
officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/male/9@0.25x.jpg
200 OK 2.2 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/male/9@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 444a95e7661a07d48ae8a2b7d67792be
e31aa744a72a17d6a3e04cd0e6f9a9fc59a47b59
d815f00761793a93ef88b73ea6451d9300a052ce64f454d30f9446af3bd9ccda
GET /1/prizewheel/cash/iqcash/img/profiles/mena/male/9@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2224
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:46 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 05:05:29 GMT
ETag: "444a95e7661a07d48ae8a2b7d67792be"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5drqCpv5dRxIjey6B8wjm6-_CjWbohVKqyzMIn4DtV3xZouvQIHR6g==
Age: 60996
officialwinner.xyz/1/prizewheel/cash/iqcash/img/prizes/iphone-12-pro-max/proof.jpg
200 OK 27 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/prizes/iphone-12-pro-max/proof.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 670x335, components 3\012- data
Hash dad6878310f03670794690dd350722d7
a8c7aabb1bb3109161074051241c9d2ed234b26a
a1affbee3313b4b1f31cd57413a5bc937a2cc6cbdafca96fd3bfd3aa881b7c33
GET /1/prizewheel/cash/iqcash/img/prizes/iphone-12-pro-max/proof.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 26967
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 05:05:29 GMT
ETag: "dad6878310f03670794690dd350722d7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 91kenz0vCZY95UcnFvqD5KoHM4PAIuOQDTi04Rk3TaFurn_I2zVupw==
Age: 60996
desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js
200 OK 14 kB URL HTTP/1.1 desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js
IP
File type C source, ASCII text, with very long lines (39559), with no line terminators
Hash 710afc5f904ea87801da7e4974cf1979
8e8351827329a8671b337441784391195dc27c4f
24e7227f0bed8ca17bcc0a344c550167c34016d0160111bfff4136b570f82ca8
GET /pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js HTTP/1.1
Host: desekansr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 07 Jan 2023 22:02:04 GMT
Content-Type: application/javascript
Last-Modified: Wed, 21 Dec 2022 12:58:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63a302ea-9a87"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
officialwinner.xyz/1/prizewheel/cash/iqcash/img/fb-like.svg
200 OK 2.1 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/fb-like.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4627), with no line terminators
Hash 6339f263a7bd6246056bda98ae188336
60b93c1930cef992fac533e306c6e1033f95e028
0068899ef50e4bcb1827c1ce475827d3d82e2ddd8a24e578a5c669a613aa7fa2
Analyzer Verdict Alert fortinet Phishing
GET /1/prizewheel/cash/iqcash/img/fb-like.svg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 07 Jan 2023 09:43:32 GMT
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
ETag: W/"765203989756e91925e8f947e660b644"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QQCqSvDa00LqhfTLugtoPoh8mLyI-SckpesVY6SO3OdeJChqcJ1ceQ==
Age: 44313
officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/female/1@0.25x.jpg
200 OK 2.9 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/female/1@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 4ccf612375cb7df45e271ecd2983281e
db4bc5414c30c39531e38c9a3f34b087cd68b4b6
75f237c0722d2dd3ef7d7e4bad43a70ac57bad90c81b9cb8b9c9b445c0a76a1b
GET /1/prizewheel/cash/iqcash/img/profiles/mena/female/1@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2853
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 09:08:24 GMT
ETag: "4ccf612375cb7df45e271ecd2983281e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: n61LMY-2TWkwPdq2DwtXsUDyxM5EtakHvFmiXFi6yBss8ni9YFtV-g==
Age: 46421
officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/male/10@0.25x.jpg
200 OK 3.2 kB URL HTTP/1.1 officialwinner.xyz/1/prizewheel/cash/iqcash/img/profiles/mena/male/10@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash f8002e02aac0ac1bb22d2c80f36ebf15
bf277a8747caf561b91a25860e772cf0f1a834a5
0e98e32d27f59276dc137de153e32c28220a635701413565a4646dc8361fd94c
GET /1/prizewheel/cash/iqcash/img/profiles/mena/male/10@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://officialwinner.xyz/1/prizewheel/cash/iqcash/index.html?domain=continuetosite.com&brand=Google&bemobdata=c=304beaf2-39e3-48e9-9625-c38dbce1cfe4..l=a3e92eb0-e8f7-4f22-96a2-8c47687d7161..a=0..b=0..r=http://continuetosite.com
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3175
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 08:54:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 07 Jan 2023 05:05:28 GMT
ETag: "f8002e02aac0ac1bb22d2c80f36ebf15"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0ERZTOwqXQ-_Jx_awEipuZUwsNlkp0s8BQAPZ8ozzInZHDYQWNsMRg==
Age: 60996
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 07 Jan 2023 21:17:20 GMT
age: 2684
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8589b6a84dd5a09ec546aff38bbd2515
1c3a3d8a69ae7a3ebda64292caf0e0f5968e81f7
f013da155203f0509d56e8174c2ae5ed23aad413b4391f276efd388519743b17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 476
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 22:02:04 GMT
Last-Modified: Sat, 07 Jan 2023 21:54:08 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Yar+tdUQwyjXq08j2aCVnw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IWgx44qJdDmDnOUNnvunm5BLQRM=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5217
Expires: Sat, 07 Jan 2023 23:29:03 GMT
Date: Sat, 07 Jan 2023 22:02:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5217
Expires: Sat, 07 Jan 2023 23:29:03 GMT
Date: Sat, 07 Jan 2023 22:02:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5217
Expires: Sat, 07 Jan 2023 23:29:03 GMT
Date: Sat, 07 Jan 2023 22:02:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 11aea3c23fce2f77cadf7a551f4e8b17
4963aafedcf3fc5f28f1b4a6b0212abfd5526702
d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5122
Expires: Sat, 07 Jan 2023 23:27:28 GMT
Date: Sat, 07 Jan 2023 22:02:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ef3a07b-bcd6-4039-8f1b-5315d2fe51c2.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ef3a07b-bcd6-4039-8f1b-5315d2fe51c2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9ea2a04001ae6e92e56682f186ffbc2
dea01d8485f04aba4dcae63eb073a76d242a0095
c71e983f9d53f96de3553eb78da4f6da141d3dd381b1a1d55061f9141d3a54b6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ef3a07b-bcd6-4039-8f1b-5315d2fe51c2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5657
x-amzn-requestid: 4bb9764d-0119-4201-b4e1-f3193d436022
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eVxL5G-VoAMFblQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8957f-65d303390f3426bc006f23f3;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 21:41:19 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: N5WKMzAg57vwOCCDpNei7EIHJiOo9jTv0QWctsnYUrp73AeacrzmYQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 da4fa914888b330b3e8a08632b8e41be.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:58:05 GMT
age: 241
etag: "dea01d8485f04aba4dcae63eb073a76d242a0095"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vIFVXgt2RmoplkAVOtUrOkXj3LmhRw-XEPe7fugZ2-mv_iDY07XzUg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 00:24:31 GMT
age: 77855
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe337b2fa-7f8d-45d1-9c3b-36a6e16363af.webp
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe337b2fa-7f8d-45d1-9c3b-36a6e16363af.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3356bee662c2ea20cbebff5293e73340
625cfd3806740998c859fef8c1153efea72f5342
cd973426a15b28fa2c141e927ebf4e12faa05665780a3cd5010f874769b336e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe337b2fa-7f8d-45d1-9c3b-36a6e16363af.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13620
x-amzn-requestid: 0858cbd0-5965-477b-9d5f-015243f86e12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePk56F4JoAMF5Uw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b61b72-705a9ad403bb7795397926fd;Sampled=0
x-amzn-remapped-date: Thu, 05 Jan 2023 00:36:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _BEaXb201gimcwDsb3uSk_O3LEH22mmdfCfCEnUSdWSAwprC8q4z7A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 15:02:30 GMT
age: 25176
etag: "625cfd3806740998c859fef8c1153efea72f5342"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82e9dc28-a1b8-4185-9eb1-6856bb670646.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82e9dc28-a1b8-4185-9eb1-6856bb670646.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c0fd17757d97ed3b4570387623f465f
889b2e3d0db6f9bc03393ff59a5eb7bee816cac3
1035a9d3c973762adfc08529b59642c3839ef95a7e8cfcced63e61ec154ad092
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82e9dc28-a1b8-4185-9eb1-6856bb670646.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10695
x-amzn-requestid: ae69c1c3-22f6-49de-91ec-8e7a854e4b27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGCNWFo5IAMFUKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b24a55-75032a3e7ab3eb897382cad4;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 03:07:01 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 5ZQenYpYQdMO-K0uy0zgWwUVEGUHGy1M_jgQI6VoMt1LEtaQBWGiRg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 5c35539543902c678280929df206948c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 12:14:12 GMT
age: 35274
etag: "889b2e3d0db6f9bc03393ff59a5eb7bee816cac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1787721-cbc0-4d0c-9ab8-c2bf14e3c622.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1787721-cbc0-4d0c-9ab8-c2bf14e3c622.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65a13b7b11843a364e80dbc2d54345ff
5b24f4bf17da840e61d96b0ed7452911539dbf67
8dea14e05eb2a0c850fe9441b605f50ec6206baf57da4293f2297cab0a82fe37
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1787721-cbc0-4d0c-9ab8-c2bf14e3c622.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10064
x-amzn-requestid: 69f52653-2506-462d-9893-0f799b344286
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eVkwUGirIAMFncw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8819b-0fa57a29615e8bb45dc4542a;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 20:16:27 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: wIRDocC9oXbYc6MO03kfkfBlZe44nlRSoJUaEkt23Hoxp_f51r6FAw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 04:22:22 GMT
age: 63584
etag: "5b24f4bf17da840e61d96b0ed7452911539dbf67"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d67a310-d244-479a-9ebb-bf5b5c75e519.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d67a310-d244-479a-9ebb-bf5b5c75e519.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 569ab3d1c95ef110fc80a984d71bffa6
15594d74ec26cc2407277f852a2b6722851967e0
b174c4e156716b22d36fe6205d5fa8d4fa56d8aa72fa0e18f1d939bfdc3bf6ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d67a310-d244-479a-9ebb-bf5b5c75e519.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10203
x-amzn-requestid: 7829bd25-6479-4294-9e72-b26e55ca30ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eNLJNHr-IAMFVEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5256d-3741d67261b41cde2aa36efb;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 07:06:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eKE0LNhazQOCxUaAsJA_3VO20Veg-zv9Qk3lgD3KY_DwFQe4YS0Rjg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 05:05:18 GMT
age: 61008
etag: "15594d74ec26cc2407277f852a2b6722851967e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
54.230.111.125
93.184.220.29
23.36.77.32
0.0.0.0