bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
143.204.55.25200 OK 2.4 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
IP 143.204.55.25:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1061)
Hash c4cbed4de1cca529b6cf3fa9f7c42204
948fc5e56d3425dfd91f8554929cfaa275bcbe15
945e8aac7f14afd12e0d13e89427ce945928c19bb92f34640471a7281c063ae5
Analyzer Verdict Alert fortinet Phishing
GET /tc/en/prize-pic-en/pick-a-prize-lander/index.html HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 12:33:10 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Thu, 01 Dec 2022 08:20:49 GMT
ETag: W/"628dbe973021cbe9bbe2a886d03338da"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: p15ORG_haIMIPN1kHvTfeJTqnPJ-kLoM7GU54fQCDaPGNG1006KwmQ==
Age: 77282
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9439
Expires: Fri, 02 Dec 2022 08:26:10 GMT
Date: Fri, 02 Dec 2022 05:48:51 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6415
Cache-Control: max-age=109756
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 05:48:51 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 12:18:07 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 05:18:11 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1840
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7426
Expires: Fri, 02 Dec 2022 07:52:37 GMT
Date: Fri, 02 Dec 2022 05:48:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: JxExJYMQWrf62XGa2eMuyUUwCpn630EP4RlyQMgPsd7cpAY6iCr3lMvDnwj0Jjl/5L3cDOT8khg=
x-amz-request-id: 0WKY4PNK1V0TVQ5H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 05:45:59 GMT
age: 172
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 05:48:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/css/app.css?id=2fbe2d9a9a40ca9b2489
143.204.55.25200 OK 69 B URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/css/app.css?id=2fbe2d9a9a40ca9b2489
IP 143.204.55.25:0
Hash 2fbe2d9a9a40ca9b2489f46d1b5520c1
a8b5e5629deabf1912d969b4036ed3c9159756bb
94d8599586a5ee9c62dc15b45ca083b69d060d0c12bf2be3673b19a9820216ea
Analyzer Verdict Alert fortinet Phishing
GET /tc/en/prize-pic-en/pick-a-prize-lander/css/app.css?id=2fbe2d9a9a40ca9b2489 HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 69
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:52 GMT
Last-Modified: Thu, 08 Sep 2022 12:33:19 GMT
ETag: "2fbe2d9a9a40ca9b2489f46d1b5520c1"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xKcoFtWloVZTilmnC4XsLjnPAhWiTXCle9zewufEUhWN2bcq3fVgMw==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/css/landers/pick-a-prize/app.css?id=9adad73dbb8583d1eff5
143.204.55.25200 OK 1.6 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/css/landers/pick-a-prize/app.css?id=9adad73dbb8583d1eff5
IP 143.204.55.25:0
File type ASCII text, with very long lines (5174)
Hash 1811bfc2e328eaa870e7dcf9e014f4b6
207f519370ef0e5e54d969f4f94f73425c64bd59
0af7c247b3ddd887232464c585c02ac80d5b3b07c275eef1ae70dc6372497a5c
Analyzer Verdict Alert fortinet Phishing
GET /tc/en/prize-pic-en/pick-a-prize-lander/css/landers/pick-a-prize/app.css?id=9adad73dbb8583d1eff5 HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 12:32:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Fri, 02 Dec 2022 05:48:52 GMT
ETag: W/"9adad73dbb8583d1eff519228da810a2"
Vary: Accept-Encoding
X-Cache: RefreshHit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Vjf0DXEZZSf-35kxD06bD8CuO7NW2dLsbdP2GaqVu-So-RVYAI97bg==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/prizes/iphone-13-pro-max/default@0.5x.png
143.204.55.25200 OK 6.3 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/prizes/iphone-13-pro-max/default@0.5x.png
IP 143.204.55.25:0
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash ed7b235df3c61de8c73af6f3baad0f75
99d4d19fa3e034fbc6fea56fae2f7930cdcdbf9a
3f353422651766fc84c1be953bead3b92e7c7bfbf794f8277bff2cd12d0d1ebd
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/prizes/iphone-13-pro-max/default@0.5x.png HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 6321
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 12:32:43 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 01 Dec 2022 08:20:50 GMT
ETag: "ed7b235df3c61de8c73af6f3baad0f75"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BmrBH3HQyPEpqwgm93xqoZuQRjRv_5O0miiFXZgDEcZk3lbFlF0KHw==
Age: 77282
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 05:08:57 GMT
cache-control: public,max-age=3600
age: 2394
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/js/app.js?id=d75b4cfe9b4f0f2f3a56
143.204.55.25200 OK 7.0 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/js/app.js?id=d75b4cfe9b4f0f2f3a56
IP 143.204.55.25:0
File type Unicode text, UTF-8 text, with very long lines (18544)
Hash 6aa2100ddc7a02bd59c0e7bea83990e0
0c43de1822bf10a77631ce86723f4640d4d1baf1
44cb1fd310da2096d8cfe0e8eb20f26e435e9b55de087be03621339e0714114e
GET /tc/en/prize-pic-en/pick-a-prize-lander/js/app.js?id=d75b4cfe9b4f0f2f3a56 HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:52 GMT
Last-Modified: Thu, 08 Sep 2022 12:33:20 GMT
ETag: W/"d75b4cfe9b4f0f2f3a56f5dad32d6c7d"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GfD1hnR5AKKOXg0dqEFIFDqsdeJ7CO1Ictj-M9J5VSK-3FO_dzJnBg==
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6407
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 05:48:51 GMT
Last-Modified: Fri, 02 Dec 2022 04:02:04 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/js/landers/pick-a-prize/app.js?id=8c7a7b30ce79c4fdf51b
143.204.55.25200 OK 51 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/js/landers/pick-a-prize/app.js?id=8c7a7b30ce79c4fdf51b
IP 143.204.55.25:0
File type Unicode text, UTF-8 text, with very long lines (65443)
Hash 379b1208f008fb8c245129f8286abcbc
e987e5289bc3c1fb33cfa43db1f494d6195cc50e
9b42ae688adb9221d731cc13a53e1d4c3ace1ca6de742764f250e4f7446ac35c
GET /tc/en/prize-pic-en/pick-a-prize-lander/js/landers/pick-a-prize/app.js?id=8c7a7b30ce79c4fdf51b HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:52 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:44 GMT
ETag: W/"8c7a7b30ce79c4fdf51b4d191f1ac9f7"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Weq_JjrX8N5TLzpajNpTwD1Squuxpu74cmQ7ezejOztKlvneoqV62Q==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/chest.jpg
143.204.55.25200 OK 5.3 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/chest.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 90b51b538726cdeed62fa02a698c0549
9961571a8310307253c465dc88051e7289af680f
13176770d558226486c709ccd5d451ada5b638e26fe710c403578f02c8aa164d
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/chest.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 5274
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:52 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:42 GMT
ETag: "90b51b538726cdeed62fa02a698c0549"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zJZmA9LP38oQkSvG0vXBiKVUEOBdEzm989MZ6SBuSPSnWmUI91Iq2A==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/logo/default.svg
143.204.55.25200 OK 1.3 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/logo/default.svg
IP 143.204.55.25:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3354), with no line terminators
Hash b580d5337a9b003d5c01131fa2a4499a
42bfde6569dd8dc267a777873da54e4d18aac945
441e8b5af8686c58ea14c4c7590ad59d3d059ef6ede588d202bdf05a8a141eaf
Analyzer Verdict Alert fortinet Phishing
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/logo/default.svg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:52 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:28 GMT
ETag: W/"96ab65a70edb983b634c817488c8dfda"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1E_EAAdLPZTttKtCzk-VcRtAfJEPZFACK_ffAyb2yXvAczF2PsuZ6A==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/account.svg
143.204.55.25200 OK 714 B URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/account.svg
IP 143.204.55.25:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (714), with no line terminators
Hash d5573d39b35bc56d0886629747c6f099
98763a8869393da0543af5ee4fc1c8fabba6bc69
04eabe62fe833ea5bfa685ead4182c42716de7dfd77b84ad37382051d0581874
Analyzer Verdict Alert fortinet Phishing
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/account.svg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 714
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:52 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:42 GMT
ETag: "d5573d39b35bc56d0886629747c6f099"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CEfgSkzZ1Kw_CY1Vipbbos3lduPW75OET8CkxCWBDA03Il_Y1roDBQ==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/menu.svg
143.204.55.25200 OK 189 B URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/menu.svg
IP 143.204.55.25:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 9f2b3b61b1c4b7d0583418dabf5052d6
46b9f1c5ef2ce8167eaa938109d9421af06dc0c8
e4fc418e895366353f26e43fb49d83d0cdff769db811b33eaf28a3ea76369863
Analyzer Verdict Alert fortinet Phishing
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/landers/pick-a-prize/menu.svg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 189
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:52 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:43 GMT
ETag: "9f2b3b61b1c4b7d0583418dabf5052d6"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dqeZ3fUpRNMH0CLB7RpC_bjZ6HjdwiBxx6mmyOiY3U_FCKgAu1nLVA==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/9@0.25x.jpg
143.204.55.25200 OK 3.1 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/9@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 4c30d4f61201b822adcfa58dbe32389c
9d9edd23a3b074135d9e043b5d1e52d8dbe29c91
19d491c137daf159170ed6d6340c33b11806347b18b2e89840989b914346d9f4
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/9@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 3146
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 12:32:34 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Fri, 02 Dec 2022 04:30:51 GMT
ETag: "4c30d4f61201b822adcfa58dbe32389c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: v20-KnQTb45f3Eug_ebalczcHvkF8PqcEcuNxEXS4Jganj8N7e2PFQ==
Age: 4682
push.services.mozilla.com/
34.214.17.205101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.17.205:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4AtHnNihAtZs8CTTwV5EsA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 08lqe8sVzPYLxQQLfnMtpkW/N9c=
ouphouch.com/pfe/current/micro.tag.min.js?z=5125495&sw=/sw-check-permissions-57516.js
139.45.197.250200 OK 14 kB URL HTTP/1.1 ouphouch.com/pfe/current/micro.tag.min.js?z=5125495&sw=/sw-check-permissions-57516.js
IP 139.45.197.250:0
File type C source, ASCII text, with very long lines (39559), with no line terminators
Hash b0248b30e57fdd1d6f2d1ca431d7cea1
8db557f8498245d59e56fbea78b2256c316e73f8
e0d17f3c9ed344a38fd3526fea8b7221afe6b7c98962141ce0a78345a7424a68
Analyzer Verdict Alert quad9 Sinkholed
GET /pfe/current/micro.tag.min.js?z=5125495&sw=/sw-check-permissions-57516.js HTTP/1.1
Host: ouphouch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Dec 2022 05:48:52 GMT
Content-Type: application/javascript
Last-Modified: Thu, 01 Dec 2022 15:42:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6388cb77-9a87"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/3@0.25x.jpg
143.204.55.25200 OK 2.7 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/3@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 2790f79b7e764407ae4b87a9dc30734b
30f0a1e4d30ac25108f2d0487f49944fbe630b72
8970ba9af5b39727ac25d42ab540c42ae7f58de4011fadb8efd2f5f317a8d575
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/3@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2727
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:29 GMT
ETag: "2790f79b7e764407ae4b87a9dc30734b"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HrZ3Rsmul8bS9SrnmSEpZCyI8OvtSMDu37crg9JiqihBRWme2Vi3cQ==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/10@0.25x.jpg
143.204.55.25200 OK 2.3 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/10@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 2ec37a714ba9202b2492cc1eff504041
29d005604784110044c80c13610ec1fe946a7d83
278b0f8b52650d39e549fc69ea49d62d3bdd0c41b3ffd939da265842b6e40369
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/10@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2302
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:31 GMT
ETag: "2ec37a714ba9202b2492cc1eff504041"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PnOc41fUB69iNZEDXw1ao38nAFLnmpMczGJQjy04EW-0BalfS-kvSw==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/3@0.25x.jpg
143.204.55.25200 OK 2.5 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/3@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 2c188d082f97b0a5b29c92dbaf7a9787
f2a3828b68ba4d06d450832a977c48a22360d5eb
afc758b894177d4003b5d02d80cd023429c99cfc3cd880804570d237cf6a96f0
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/3@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2518
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:32 GMT
ETag: "2c188d082f97b0a5b29c92dbaf7a9787"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: D7cwZvq5XF4g5InQikCefdM-Yf6qX1ZV2Riblfe7gZ2ZX9pUe-nynA==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/6@0.25x.jpg
143.204.55.25200 OK 2.8 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/6@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash af242991b9a56424739c63a6bd4090a7
7b41b3b2cfbbe69a865efa8863883bf029738b6e
c53bda952fa4ca1869dfb4fd7db948ef87f1a8c8f2e6633e2320465f01f0829f
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/6@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2766
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:31 GMT
ETag: "af242991b9a56424739c63a6bd4090a7"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0hliXURbesz5md3NhzLLAmivRkxpmqpun-v-M28J1EzLP8L39d7wbQ==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/5@0.25x.jpg
143.204.55.25200 OK 2.0 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/5@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 732da0e5f3968ec3d9014a6bbb62c04a
5d306c8778fdcac19f03542fccaf31df1cb8a783
d3eefd5709b25e1bb1129cccb1da22e54816cb2d15a2ed4cfa045b57579a7ef8
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/5@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1960
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:30 GMT
ETag: "732da0e5f3968ec3d9014a6bbb62c04a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WWsnl9EOOpzgALmRU59cPruwRfOzqwA0czjcpcG2EAm7ZPa4GoVYpQ==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/1@0.25x.jpg
143.204.55.25200 OK 2.8 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/1@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 9ef452251daa9ff9fbdc5fe827a35061
2cb40a02efce5fd8772f57b8e9737018fed3f9ba
355126576c7a0bdbbe771a2b039d093c855efe6805941a36456324a2076e2ce1
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/female/1@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2781
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:29 GMT
ETag: "9ef452251daa9ff9fbdc5fe827a35061"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Tgk6KN0UcwHpIr7IJR9UI7gtFF1kOLd-8idUWhkPYc4MZ-v9EBaROA==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/6@0.25x.jpg
143.204.55.25200 OK 2.2 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/6@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash d6f7b34738ae2d7bb6bb0d974edc6dcc
319d82ee7a0cf393e10a59403a0aa450518f7cd9
d6083b99e2ac26ebf0cdb2ebc474898eb4da00fda7bb6fb671faae6038ae7a27
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/6@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2198
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:33 GMT
ETag: "d6f7b34738ae2d7bb6bb0d974edc6dcc"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZfcxE8X-zvhDzuHGEUDgRO681NU4tTUPtvB1BIDjQoqilaz32KTl1A==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/8@0.25x.jpg
143.204.55.25200 OK 2.4 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/8@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 0b9c262f174c68f11eed1d6b20a409bf
07e9f6622c565a71bea52e739fad53ebe7d6daea
2b3804edaa35a4b4c13afb6487036ff70af47463fb5333efbaee804e994cf606
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/8@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2437
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:33 GMT
ETag: "0b9c262f174c68f11eed1d6b20a409bf"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YLcUyQnMypMAt_rVdbsZCC0bA9sz48cD519CvZDrXXgiA_oMuhzUWg==
bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/2@0.25x.jpg
143.204.55.25200 OK 2.1 kB URL HTTP/1.1 bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/2@0.25x.jpg
IP 143.204.55.25:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 0f15632c24d4646c58f30feaa3baaa8a
a7f319366432f5a63d7f11d30b0a6c9cb6398b64
4118d09fb21a7f34160f470078f6dcba042e8a07e2b4e32de12a4dcd9c5e7da8
GET /tc/en/prize-pic-en/pick-a-prize-lander/img/profiles/african/male/2@0.25x.jpg HTTP/1.1
Host: bigwinstoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bigwinstoday.com/tc/en/prize-pic-en/pick-a-prize-lander/index.html
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 2053
Connection: keep-alive
Date: Fri, 02 Dec 2022 05:48:53 GMT
Last-Modified: Thu, 08 Sep 2022 12:32:32 GMT
ETag: "0f15632c24d4646c58f30feaa3baaa8a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f8d0PqYdBZiqfeOOpEIvF2exprah6keJXG5GudGdyPp6g1YgWiW2Jw==
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4221
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 05:48:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4221
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 05:48:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4221
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 05:48:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
34.120.237.76200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:49:56 GMT
age: 28737
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1250c1e7-37f4-4697-8233-d05f398cb066.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1250c1e7-37f4-4697-8233-d05f398cb066.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f0fc684e61682c4078a82ee3d901ae52
ea65ad98933ec58afa3fa5c7642491d77db7e6c2
5e953012dba2b85cfda5befe2448ab87fbc2432a071e11a33b44be4f5148a4a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1250c1e7-37f4-4697-8233-d05f398cb066.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6752
x-amzn-requestid: f398ce98-353e-4783-aa42-dbf1ad036ab7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGepE6roAMF4zw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-0753d209291e197e7c6422a6;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yQ2Oc2viJ7EoRW4QSMG30tsGK73zxYQsXKKcWP3vleI0CTBVRfB1Fg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:31:16 GMT
age: 26257
etag: "ea65ad98933ec58afa3fa5c7642491d77db7e6c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd8ad22c2eb1eb91c76970fa449f1bc4
0de97f3a4964038222bd751e043e413113e6db9d
668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 02EF3QEVKmEB2ikbGk9gzQq7_VMi00ufHUNRFTL8MpwJKaXQwdT8HA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:42:27 GMT
age: 7586
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1c80b8025242ddfcc816ec612456b99e
aa944d10fe4a44b790b01ef62edc0f85a6d558e3
a9f060bc15738a3fe257e0c81a29e4611a89c273bcbb2765ce856d4e854a5f1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6edb00ee-3888-4974-ae1a-52ef18e62d0d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11402
x-amzn-requestid: 20c2c359-1e43-40c0-885d-1c90e76ea12b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGzJHu-IAMFbYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e7a-1d89722e767daa014b174a39;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJBnbjJB_kvPuJcePGnno3zI0CTWAzV-Osb2L1hPZZhlNYhFHWmLsA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:51:33 GMT
age: 28640
etag: "aa944d10fe4a44b790b01ef62edc0f85a6d558e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58a28fc1cbcacdb07b3ca175281982b5
9bc47ee49fc070d0997e49a719bd9758685ad583
d3bfcf749c4652cb29f7c82a5d7ba940bd607f9060e49c1c40a112eb3e625bd9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6564
x-amzn-requestid: e2875cf3-3915-43a5-a724-4de2ca03de56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGepHOiIAMFTFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-5f7e2a3f609d54a609a12670;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mwGAEu-gPXY5Opwd972VbBA6l33dNk7bPFSyZmciaplQKj2ZuTkQSg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 29646
etag: "9bc47ee49fc070d0997e49a719bd9758685ad583"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 379a4a1b95d3aa3c5a4f8e7f9abb030f
d45dceb3dc58a07197aa5077582b5b1cd2ff791a
1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FhCtGsjgnq83-zRNBH-y9BHUh2IRaN0ahO-BCUw7bTWU8jAanBqdlA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:53:35 GMT
age: 28518
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2