| track.tracker239.com/c9b3b60d-e936-43f5-813f-d5c53b70bd5d | 18.195.149.11 | 302 | 0 B |
URL HTTP/1.1track.tracker239.com/c9b3b60d-e936-43f5-813f-d5c53b70bd5d IP18.195.149.11:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b3b60d-e936-43f5-813f-d5c53b70bd5d HTTP/1.1
Host: track.tracker239.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Sun, 18 Sep 2022 21:39:57 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Pragma: no-cache
Set-Cookie: c9b3b60d-e936-43f5-813f-d5c53b70bd5d-v4=gpFqLdVu5Og-gvuHIJzygI52FIS_tXbTpds-upRLF2g; Max-Age=86400; Expires=Mon, 19-Sep-2022 21:39:57 GMT; Domain=track.tracker239.com; Path=/; HttpOnly
cep-v4=3yOY9unjlDFo6cl5q1PJQEv3dgLi5SVQjUU_T20i5xg44sNT3j1SbK4NqbJw3_u_ggYy-H6FKzLXnHua167XlKzEHyYGAKeOC8S1V0ndlbWlgkWsRvTKDlb4k7XAwDF4ZJtCDnlb9nbRBoph-xlV8919xxWBvKMmDsNGGCmPvF_jkK9NM0z6yTja2m2ndomK9Q0bZj-RmeJOMHCaUi9sZoupdE_S10J585BqMAG4V6dfjwvFMzFVYizdoFD_plmcQf7XdvGoCBI7nM3Lr1W6JZ40XfMTlNr6DyJocgvhlpqhDMFKxoxYVtLgcKpdDMxKqaU-qVvqEFRVlQNJNAStm22xaKArDnpBA1h6NdNn8R8; Max-Age=86400; Expires=Mon, 19-Sep-2022 21:39:57 GMT; Domain=track.tracker239.com; Path=/; HttpOnly
|
|
| firefox.settings.services.mozilla.com/v1/ | 143.204.55.115 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb593eb39329cfe060d55be5e4a5405e2 78e46c1028e9f94f8569303ad2d90d7df13a059a 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 18 Sep 2022 21:12:24 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jkEoXKLgCV771T4qcr2WC6drvoDgVzHfNpYxfePQaSaI0MMhy0OyuQ==
Age: 1653
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashadb43321efa5cd1662993b701ff25fa4 1299dcea7e9c59d9f22f39d69025484fe71098c1 2c25a6717245be3746f1412af9dd1c351e12dbb93e8e08c3ddcdacf35e419514
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C25A6717245BE3746F1412AF9DD1C351E12DBB93E8E08C3DDCDACF35E419514"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8550
Expires: Mon, 19 Sep 2022 00:02:27 GMT
Date: Sun, 18 Sep 2022 21:39:57 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.110 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.110:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MezEB2KAdkVf8zsVtwLgcx2mYw9qBVuOhc9u2JvNizdsVEchlAsvkQ==
age: 61484
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.39 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.39:0
Hash311511f2655e117710a98cab48a7816e 13a4e3ebba1a7b10de19c7f160540168c4ff0b35 f847eb2636f0fb4ca9895ebabe8872d9cdb070d8425f4b81c79cec3c8ea8b435
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 21:39:57 GMT
Last-Modified: Sun, 18 Sep 2022 20:58:11 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vaDRPIImJ4aHIgOQv8KxIix58STP6i3utvKU1PB4B6fFfmyCFhoDmQ==
Age: 2506
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 21:39:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/o.webp | 143.204.55.116 | 200 OK | 1.6 kB |
URL HTTP/2bigwinstoday.com/gr/var+1/o.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash5f7381699cf34937a17c16b5690e8445 0ec381d7c61633f0bb98407df9d0f75fb8a5ab60 5c661eb9d790fbd723af0aabb594c66734fade23b05846873f27b2010134d0b9
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/o.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 1580
date: Sun, 18 Sep 2022 13:31:17 GMT
last-modified: Fri, 02 Sep 2022 10:40:28 GMT
etag: "5f7381699cf34937a17c16b5690e8445"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S_ufqpN4FbMLe4MjOAnf3nRLTvbAAobsSw4AwioypVFdM7G_szBZlA==
age: 29320
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/m_w2.png | 143.204.55.116 | 200 OK | 1.5 kB |
URL HTTP/2bigwinstoday.com/gr/var+1/m_w2.png IP143.204.55.116:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash0a705261115767aae48b96c475ceace7 91aa07b9ebd43b73cf3f3bf4bb27ea5308fbc86d 375d806aedce5a2d9b42dbe160c8fba001ca0c252213c0ad85578fc72e3740f8
GET /gr/var+1/m_w2.png HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1521
date: Sun, 18 Sep 2022 20:05:14 GMT
last-modified: Fri, 02 Sep 2022 10:40:27 GMT
etag: "0a705261115767aae48b96c475ceace7"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 67lx8Og7Xp0DWlUAKamhEp7tjPVfrx9_x6IC_y0Zz8qvpRd-azs08A==
age: 5684
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/a.webp | 143.204.55.116 | 200 OK | 2.1 kB |
URL HTTP/2bigwinstoday.com/gr/var+1/a.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashc4d2ff794ed3cfd59568cad45a4bb515 d1bfc806dae7fab7a7f5b61c62afeb59b2d545c5 72840fba154dbf033594e5ee42856a1685af8bb5944e048fa0bbca55afdba63b
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/a.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 2068
last-modified: Fri, 02 Sep 2022 10:40:23 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 07:47:19 GMT
etag: "c4d2ff794ed3cfd59568cad45a4bb515"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2gdHr9x-YxtZIo_JaqJVPAZmYN5J61_FFezqLG7mtqlSH-cDurLrAw==
age: 49959
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/3.webp | 143.204.55.116 | 200 OK | 932 B |
URL HTTP/2bigwinstoday.com/gr/var+1/3.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash4ebb2d8f64f64cbf3ee41f711123002d e157b1d7099d4ff95ecdbedfeab1af4cc56ca36c c431df3801ff85ff8be8430e9f1e16003105c477de3133022a42bbbff2c043ec
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/3.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 932
date: Sun, 18 Sep 2022 20:05:15 GMT
last-modified: Fri, 02 Sep 2022 10:40:21 GMT
etag: "4ebb2d8f64f64cbf3ee41f711123002d"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dPkhkx0DFqjAujKzATNIEXyqWiHkzBTKwUHsFNwISy22q7BvuBpqSQ==
age: 5683
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/5.webp | 143.204.55.116 | 200 OK | 684 B |
URL HTTP/2bigwinstoday.com/gr/var+1/5.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashe134e565b6a34fde4180a41680c6585a 07adc849191a579b948ff122405f95ae1e13de90 cf19dbad01984892f4098fdd53b03af50162b65cbd20deb10dab322ed2da8a26
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/5.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 684
last-modified: Fri, 02 Sep 2022 10:40:22 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 16:50:48 GMT
etag: "e134e565b6a34fde4180a41680c6585a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zXG2ERYqfzbBrxCFGoAFSf7Cg19hbPAd5FgvGULN6dJIqesXPoSArg==
age: 17350
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/6.webp | 143.204.55.116 | 200 OK | 796 B |
URL HTTP/2bigwinstoday.com/gr/var+1/6.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash903bf48585500c51c2b82c20da24430b 603d5c9789f7c0dd1eb3a912776a62a4aa6d21f8 ade868cdcabc65b088057f53af1cf69b8dd607d6d0b8838d98ec10a2d57b924e
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/6.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 796
last-modified: Fri, 02 Sep 2022 10:40:22 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 16:50:48 GMT
etag: "903bf48585500c51c2b82c20da24430b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: b7furdB1zfHHUsKH3tcxbHCzYNU_ZmQ55xDku8YQYs7h32KCSf38_g==
age: 17350
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/gift.webp | 143.204.55.116 | 200 OK | 3.4 kB |
URL HTTP/2bigwinstoday.com/gr/var+1/gift.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashae0a8274dc8c79b867b79e5e5569b1b5 c09f57fce5bb4f3991710cf289d06b8f5e5fdc47 784a61f7e1d774f10b357ffdeb16422b8a78609a70099e8c311a7efc3f1850b9
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/gift.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3442
date: Sun, 18 Sep 2022 20:05:15 GMT
last-modified: Fri, 02 Sep 2022 10:40:25 GMT
etag: "ae0a8274dc8c79b867b79e5e5569b1b5"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: INSrmFZnxfMvIisW4o_Ilp8uAN5jOg0WdbyETQm6-7ZIfKWpnb3gmA==
age: 5683
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/i11-g.webp | 143.204.55.116 | 200 OK | 3.0 kB |
URL HTTP/2bigwinstoday.com/gr/var+1/i11-g.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash7f697c0cfde57272e25e758f739287f7 5b23fdcd080ca4f9d307d1f7371397501aa96734 8ffde5b57c0e34a8747346c5479f1d60950396ac0a4a5e3215798c4b7d4ac358
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/i11-g.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3034
date: Sun, 18 Sep 2022 20:05:15 GMT
last-modified: Fri, 02 Sep 2022 10:40:25 GMT
etag: "7f697c0cfde57272e25e758f739287f7"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: T4Ts-RPvK6JnNZXPjuIMrQUcxSFRJsQ5vgV9QcNkrV-B9AADR_yIdQ==
age: 5683
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/s.webp | 143.204.55.116 | 200 OK | 2.7 kB |
URL HTTP/2bigwinstoday.com/gr/var+1/s.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashdea3172fcefb788703d3ca0b84293c1e 08521b87f362d2fabac5fdf7eed97c7006c75d61 0378211ae11fb01dca7e61e46074e304464875f3de6572bbdb7552e48e17b433
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/s.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 2700
last-modified: Fri, 02 Sep 2022 10:40:28 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 07:47:19 GMT
etag: "dea3172fcefb788703d3ca0b84293c1e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tuk45CrhJc7z7uiKStJWVpytYoV51kogpP5O0P1Q_LtV5R4YchZ6YA==
age: 49959
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/text.js | 143.204.55.116 | 200 OK | 2.2 kB |
URL HTTP/2bigwinstoday.com/gr/var+1/text.js IP143.204.55.116:0
Hash46ee43a45a996eb417435c7fda3dd58a b046383b861e8bcfe5eb32ba8983ec3d03b888b9 52ef788417e96f7f5f3e296716727ab2f4b4a64525e6ce14ba43754e88ed46cc
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/text.js HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 10:40:29 GMT
server: AmazonS3
content-encoding: gzip
date: Sun, 18 Sep 2022 20:05:14 GMT
etag: W/"21519ccfca831cce560682d30dc5ba8b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bWggF7UtZHqgRJ4JKRucziEe7V0ih5YUzflYf5zspnEqVRpEyKDMoA==
age: 5684
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js | 172.217.21.170 | 200 OK | 30 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js IP172.217.21.170:0
File typeASCII text, with very long lines (32025) Hash83b3b5729cdff3976db52c51831e96b8 d23dc823e37f58e5366340be755730f3fa9a850d 675fa88b39008a09994460a93b310a7d4593735009a9b24b6f176c347ad12421
GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29725
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Sep 2022 06:17:19 GMT
expires: Fri, 15 Sep 2023 06:17:19 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 314558
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasheaa8b4aa123f9dd7237c5c51d2f848d9 1082f5f6ef7229ec76f94f3d236f273b26294563 d1ad33dae2fcab5c7d66875f0e7a01cc30e0b3a031606917fa5448c54f84e20d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:39:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bigwinstoday.com/gr/var+1/l.webp | 143.204.55.116 | 200 OK | 220 B |
URL HTTP/2bigwinstoday.com/gr/var+1/l.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashff5420b10e9b686c09db260712fa38b4 61d0def700599369c6faa1165e131001f4a39edb 0f81bf2fa614e54c4bef64e9d8e0a977250f8081ecf606cf6ef3337313061598
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/l.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 220
date: Sun, 18 Sep 2022 13:31:19 GMT
last-modified: Fri, 02 Sep 2022 10:40:27 GMT
etag: "ff5420b10e9b686c09db260712fa38b4"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4c_ydbyXiTDx5nZw0sB7XgzYGEO1ZNVi6C4ctFOhxZ177vcIZ-XhEw==
age: 29320
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/1.webp | 143.204.55.116 | 200 OK | 858 B |
URL HTTP/2bigwinstoday.com/gr/var+1/1.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash31d2adce7415c824253d7dc526e0153a 0e2fe6c1866d1640fa10cca471359d73eb6a8b39 dfdaf0a49238d075aac91c23a61d290d0a322faa414def665ffb0e50763467c9
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/1.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 858
date: Sun, 18 Sep 2022 20:05:15 GMT
last-modified: Fri, 02 Sep 2022 10:40:20 GMT
etag: "31d2adce7415c824253d7dc526e0153a"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rY-j7HYRUZhZE77PfrV-zde7XIPHmWYhCsBl5UY_5Y6E-34AK_yWGQ==
age: 5684
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/2.webp | 143.204.55.116 | 200 OK | 1.2 kB |
URL HTTP/2bigwinstoday.com/gr/var+1/2.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash0b3be27b05c1af6ed53fa6a3575aaa10 66289a955c3b6bf9d6817c0689f1fa2fbae38d97 5fdde319b91904d1a582de39e1c709842e0030611d8b9026c3aecd47c575c9b1
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/2.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 1212
date: Sun, 18 Sep 2022 20:05:15 GMT
last-modified: Fri, 02 Sep 2022 10:40:20 GMT
etag: "0b3be27b05c1af6ed53fa6a3575aaa10"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yRO1rNfWlxYi6qU95BUHy0x845kR6GLqVSFfyIuXmslnexwjXUugOg==
age: 5684
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/4.webp | 143.204.55.116 | 200 OK | 990 B |
URL HTTP/2bigwinstoday.com/gr/var+1/4.webp IP143.204.55.116:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash7859efc0c347cd1f47f60fb0ed121b3b dcee214de2519cd1e41c2c19a388adcda99b9ef8 8d021bc1fc1d6af3957cd52690f2bcfdac82145df0239cdfa0445f40b6c3d937
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /gr/var+1/4.webp HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 990
date: Sun, 18 Sep 2022 20:05:15 GMT
last-modified: Fri, 02 Sep 2022 10:40:21 GMT
etag: "7859efc0c347cd1f47f60fb0ed121b3b"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OZFkd_zzKygJJK1asCtt8kOADRTLQrG4rNkYUkaNGlfo5f7V4bb9NQ==
age: 5684
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.115 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 18 Sep 2022 21:03:22 GMT
Expires: Sun, 18 Sep 2022 21:08:41 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YUUv5eyIFS0PM_TrUgRw8ecM88laPZkFqIg_m4eQZTyMKTI2fhTozw==
Age: 2196
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash5fd1174f35b25298fc44a6de1af3f3d6 d45a47995ec34c7df480b3efafb13f55d9df7eb8 f60573eff255ef3d7603ca813f410c30588931b4018ffa0e07fa0bb2653c47af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 993
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:39:58 GMT
Last-Modified: Sun, 18 Sep 2022 21:23:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.164.56.167 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.164.56.167:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eLuFaZ+wt/tKfSWCfleqgQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: E/JjY6lsCGVk1AMPuDmE/bH/i1c=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6382
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:39:59 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6382
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:39:59 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6382
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:39:59 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6382
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:39:59 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6382
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:39:59 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash51d067e534c477ce996b3e806f6a132e 451c1f67948e45909e636828e3d2a3099de922f0 e13318949733eb7992695c61570cc8b2961d881a8343c677a77cd035e787bbaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6869
x-amzn-requestid: e4e424a6-6c79-405b-8d1b-d40749ae3f0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn5yLHi8oAMFpXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263cda-22f6dae17ded045177976eaf;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:32:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eSPLuSCIr6IOor8bQh1STKcy6i_bS6nPhndKrN_g7IrXl6U43TogYw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:29:35 GMT
etag: "451c1f67948e45909e636828e3d2a3099de922f0"
content-type: image/jpeg
age: 83424
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e47c10c-5801-4548-a632-1dcfbd043a60.jpeg | 34.120.237.76 | 200 OK | 7.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e47c10c-5801-4548-a632-1dcfbd043a60.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash354c71e744d302c316f492a8fb7642dc cdf6caf4cd953e7b58bbb5f9a1512a4e3e06b792 f084331bd667f56556170c595391d888391284dbb7c18794d5033d5db1f07715
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e47c10c-5801-4548-a632-1dcfbd043a60.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7401
x-amzn-requestid: c59249dd-f9cb-4750-8287-65789c57fd77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6J-FaAoAMFZQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263d72-6a68d771099a6006717a547f;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gOh04gufveW2WFtszuiJPyX8mDykbsFMpBh8KWSRxQnPSRcZ2fMnHg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:45:30 GMT
age: 86069
etag: "cdf6caf4cd953e7b58bbb5f9a1512a4e3e06b792"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7a22ab7dcdf50f4a297b8e117d336eae e139a0974317212f094fdbe59e26ca5cf6b9e56d 9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd5675c7-5120-4f61-bd91-8c4d9af84130.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7788
x-amzn-requestid: 2cb48f87-8b72-4ff7-b041-a6e704b854a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIP2-HFHoAMFssA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6319935f-693e2f2e5a0bcd9f690f21fa;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:01:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4-H_LbXRjS1PJkVz9OIhwsaPfu8ZlL98zTZG--hdmij9Tc6KtmNSFQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:51:29 GMT
age: 85710
etag: "e139a0974317212f094fdbe59e26ca5cf6b9e56d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf003d8b6e12692fb16dddd6827deead8 786c333cf08456aea446a55c547520572e1c2df9 d79ea50cfc0f237b3de8f1826cbae1de0b1dbc632a5a06b08d9640abedded935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11919
x-amzn-requestid: 2f547c1f-2f5d-4707-8f6c-fe9dfff51383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfS4FI9oAMFScw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145ab-3c967f2653d06c1c079f88c1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QgOb-hraq20XpHk_0Cyz2UMxaIEjP8ilIXt2VuhiRJWJAOG5EuAb5A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 05:49:05 GMT
age: 57054
etag: "786c333cf08456aea446a55c547520572e1c2df9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg | 34.120.237.76 | 200 OK | 5.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash56ade9172e883c777dd974ca879bceba b2aaf019e083443a6404c262206ee2e981d3165c c8407ad191143d2d947464b357d8426efb334cb165c4fa5ca01573d8f7ca7b76
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5133
x-amzn-requestid: 01f39c0a-c86f-4057-a505-20200819203c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YioKkFrFoAMFhMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632420a9-5821f44144b61475180ec961;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:07:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: mDe4BYbMkqkO3wq6onH6c_YOfWn32Z4L9t-QW_5mwez4bcrVkrQBuw==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:38:13 GMT
age: 50506
etag: "b2aaf019e083443a6404c262206ee2e981d3165c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg | 34.120.237.76 | 200 OK | 5.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash29f4a52fb629dce4ef8038d4df7ea58a 4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0 32cee35b22110b83738f49f49edb6efcedb54fe793d5ccc900004e16e3fefda3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5827
x-amzn-requestid: a30d5a61-ccb2-4582-8298-1abb79830dda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yl7VSF21IAMFvGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63257288-5b79117f185617fb0f37a845;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 07:08:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2cYYmknnm5GHRMA69N-dqXXKHb1-tfN1PuRYB5xxtRJK5Gk3-PO0Bw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:16:15 GMT
age: 51824
etag: "4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/1.jpg | 143.204.55.116 | 403 Forbidden | 0 B |
URL HTTP/2bigwinstoday.com/gr/var+1/1.jpg IP143.204.55.116:0
GET /gr/var+1/1.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Sun, 18 Sep 2022 21:39:57 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yiKFX1JdsY-fa3V4erNltjzSczqLeqn1pRMxRhpPdPCmdaOUGejrQg==
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777 | 143.204.55.116 | 200 OK | 0 B |
URL HTTP/2bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777 IP143.204.55.116:0
GET /gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777 HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
last-modified: Fri, 02 Sep 2022 10:40:26 GMT
server: AmazonS3
content-encoding: gzip
date: Sun, 18 Sep 2022 04:06:45 GMT
etag: W/"39b59ee28efa2ab8a6d188995c073a77"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 14WqDjeSmDzYBKQxJIjbU4Jq95EVzUPcLW1vT0cjA0_63Hr3a_HyyA==
age: 63192
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/4.jpg | 143.204.55.116 | 403 Forbidden | 0 B |
URL HTTP/2bigwinstoday.com/gr/var+1/4.jpg IP143.204.55.116:0
GET /gr/var+1/4.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Sun, 18 Sep 2022 21:39:57 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: a8SsKfp0gWE_pWkl43Jty2AP2wXVxE3NCxSYIietJOhDOtfpltI8yA==
X-Firefox-Spdy: h2
|
|
| bigwinstoday.com/gr/var+1/2.jpg | 143.204.55.116 | 403 Forbidden | 0 B |
URL HTTP/2bigwinstoday.com/gr/var+1/2.jpg IP143.204.55.116:0
GET /gr/var+1/2.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bigwinstoday.com/gr/var+1/index.html?cep=2dXrltQV36bL6C9CR5aPAaqdzEovCDk7NndPZqkj0G46Bt9bLcja9-v2rZ4C1ZaDjzf9Yze1OG4JyR611TwP0MFcks4ErjHxsgQzcB27cVeuEEqWtI5bYq5nOBMHPgjQtbDxlpaveloKp47tGzthVV31L6Sfp1bSoIeooIUpbL-cwtwPwmz8mxK8yE2j0Ty4yHtJ7I43RTEt6lLcs-Y_xUdEpRh9NfMjhhNL6JZ2sWgCD-VOoi-i920NJcExyo-KxdLoJXMqcEapEHH-K37OFp2tl0rq3zt63E6Lo2ksf-bqPJaOIzsFYFAwFCbUxpy-ZVMoTIT4zhD_v6cNacWolOnaGoFJxvOa5bki-OJIoMc&lptoken=1646636f53b789de9777
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Sun, 18 Sep 2022 21:39:58 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: evVwI5RWuH8AUfzZOSs44kXvUXM-WeEKUJNrDgK3cFwSu1k2LU9iYQ==
X-Firefox-Spdy: h2
|
|