Report - clickwinner.icu/a2f14eee-b320-4060-be33-d787cc821326

Report Overview

Submitted URL
clickwinner.icu/a2f14eee-b320-4060-be33-d787cc821326
IP
18.156.16.63
ASN
#16509 AMAZON-02
Submitted
2022-12-06 08:06:08
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	337 B	1.4 kB	34.102.187.140
clickwinner.icu	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	383 B	1.4 kB	18.156.16.63
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
ocsp.r2m02.amazontrust.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	350 B	984 B	54.230.80.227
officialwinner.xyz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	17 kB	172 kB	54.230.111.119
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.188.211.138
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.1 kB	23.36.76.226
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	67 kB	34.120.237.76
desekansr.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	942 B	701 B	139.45.197.250
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-06	medium	officialwinner.xyz/1/prizewheel/cash/cicash/css/app.css?id=c588c17324f2be0e0ec9	Phishing
2022-12-06	medium	officialwinner.xyz/1/prizewheel/cash/cicash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6	Phishing
2022-12-06	medium	officialwinner.xyz/1/prizewheel/cash/cicash/img/fb-like.svg	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-12-06	medium	desekansr.com	Sinkholed
2022-12-06	medium	desekansr.com	Sinkholed

JavaScript (10)

	URL	Size	First Seen	Last Seen
	officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d	40 B	2023-03-07	2024-04-24
Pretty URL officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d IP 54.230.111.119 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:01 Last Seen2024-04-24 00:06:25 Times Seen3864 Hash fe0dc8d4915af0701a005086d0696180 2e65cc10554fde204edbde4d3b1e4fedff82cfa7 909b1dec809484d438fc8a24deba298ffbed61663709c5f0a5302746a8ac41be Loading...

	officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d	118 B	2023-03-07	2023-03-17
Pretty URL officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d IP 54.230.111.119 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:15 Last Seen2023-03-17 12:46:47 Times Seen1 Hash 857fd7e332c1cd8d3b2e06ac1c97379b 5363e0c96666de4eac2ef8f9f2d349cbb7bb182b 11c8f4cb2d38dff0ce12fe41eb4189355ec16622e87febf44253ba97abb6351e Loading...

	officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d	366 B	2023-03-07	2024-04-15
Pretty URL officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d IP 54.230.111.119 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:11 Last Seen2024-04-15 01:27:42 Times Seen586 Hash 40f2114f951199cb58a18a09aced59ac 2e8668b1491bc84c8cb4b968c52367a7d0ca83be 5bd0b29def7bdcfa084a85c9f395f801cb264976c7ae682d944c37d05d7ef97a Loading...

	officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d	748 B	2023-03-07	2024-04-23
Pretty URL officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d IP 54.230.111.119 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:15 Last Seen2024-04-23 23:06:51 Times Seen168 Hash 2da04f30a5c43535406e06ba1c714c51 a63158f7e5112261c0e4d4a3c6ab8eeff748e117 b230e4c3f5ff61bbf5fb50c9a823e679b65c60f147477ed621836dd9b4711c0d Loading...

	officialwinner.xyz/1/prizewheel/cash/cicash/js/app.js?id=15b1bae461854d516179	977 B	2023-03-07	2024-04-24
Pretty URL officialwinner.xyz/1/prizewheel/cash/cicash/js/app.js?id=15b1bae461854d516179 IP 54.230.111.119 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:01 Last Seen2024-04-24 00:06:25 Times Seen3065 Hash 15b1bae461854d516179a34a8c9b5f08 330c1d191253fe07c5fe6b5af37872408f2e5904 1bd25e467ea078265aee433e0cf9732a7e127514304634590a2de17fb2330896 Loading...

	desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js	40 kB	2023-03-08	2023-03-11
Pretty URL desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js IP 139.45.197.250 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:06 Last Seen2023-03-11 23:52:00 Times Seen1 Hash bbda4d4cb1cb04651668ac9894355eb7 beb26013c4507a5eaf4a6c233a269e064afc0e73 ec3ddcca3167f811aea26c32d2c02e740b4c24511832f44b7db960e993be37f4 Loading...

	officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d	103 B	2023-03-08	2023-03-08
Pretty URL officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d IP 54.230.111.119 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:11:32 Last Seen2023-03-08 20:11:32 Times Seen1 Hash 7692b50f9cef3423257a1b3276782a4d 77a9a27b8a13503d1049a4a217d3fa4dd4b78728 dbea9663d76e499d2b1d78e0f19cfc3fbd35ef97332dd74362e1627cfa6948c0 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 61d8ced2461adb84846a2271c4bf7934	80 B	2023-03-08	2023-03-08
Pretty Observations First Seen2023-03-08 20:11:32 Last Seen2023-03-08 20:11:32 Times Seen1 Hash 61d8ced2461adb84846a2271c4bf7934 bca4a933947587060c266b33fbbb31a80b0ca1a3 e89075caaf6d71ca32623e5ed2a6d18f4d2d2a8e9fd1745ac800ec95e5059ff4 Loading...

		Size	First Seen	Last Seen
	#1 Write - 2310408a63388fe57e3a4177168a8798	7 B	2023-03-07	2024-03-02
Pretty Observations First Seen2023-03-07 01:02:27 Last Seen2024-03-02 10:53:39 Times Seen1245 Hash 2310408a63388fe57e3a4177168a8798 532c67fe1b5afae15d2d08fba7a78de0f63cc4b5 9bd88f2485acbb9426ad3dd9e06842ede8c7516d0ba8559298675f09419681fa Loading...

	#2 Write - 4ccdf2881b0a1a7e55b8eb33250ded75	83 B	2023-03-07	2023-03-17
Pretty Observations First Seen2023-03-07 01:28:57 Last Seen2023-03-17 10:35:36 Times Seen1 Hash 4ccdf2881b0a1a7e55b8eb33250ded75 bfca639bff05af66caede88d11ea53a6dd640b70 8a835c1909a4c186596ca45910eb7d7d9c5a343f1cd2e9fc42954866c5de5fff Loading...

HTTP Transactions (42)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20613
Expires: Tue, 06 Dec 2022 13:49:30 GMT
Date: Tue, 06 Dec 2022 08:05:57 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3838
Cache-Control: max-age=98960
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 08:05:57 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 11:35:17 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 07:20:22 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2735
alt-svc: clear
X-Firefox-Spdy: h2

clickwinner.icu/a2f14eee-b320-4060-be33-d787cc821326

18.156.16.63

302

0 B

URL HTTP/1.1
clickwinner.icu/a2f14eee-b320-4060-be33-d787cc821326
IP
18.156.16.63:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /a2f14eee-b320-4060-be33-d787cc821326 HTTP/1.1
Host: clickwinner.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 
Server: nginx
Date: Tue, 06 Dec 2022 08:05:57 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Pragma: no-cache
Set-Cookie: a2f14eee-b320-4060-be33-d787cc821326-v4=Nm1n9Q7LOE06PHiQDywYfzog1Z696AtHiAC41kgb7LI; Max-Age=86400; Expires=Wed, 07-Dec-2022 08:05:57 GMT; Domain=clickwinner.icu; Path=/; HttpOnly
cep-v4=PjmxgyUy6HE2wUpyjTDxFrRqE9H6P1yraqdjF8wNIPiMEJQRHXC5sIf6uM5xevOZOHMyPPxXI-gqpT4_w_v25WyjI47ZRj2f5fK1ggwtd0xaCSJtcZ0lwulzWEbeGf7xoKu3jNb5trXaSwjAJT2arzJ9qd_mVqtN47eujCXqOBaOxiT8LrPRK-KFLoMtkTnsa-_YW1WpSg-6up7HgwIeSw7cYiOanYz8fMqhA7JgHTGUvPDKXxaiohb3QlVCO9OeaPzYSfgcqp2g25CGthWCv1m0tv-LkLTsxi4URZu9DPmkePdj53qT5xOwM_vOdQM1A2Pz5pDiyF2UfCw7OKmqIdD-voiiGtplP8GD7V6CTLo; Max-Age=86400; Expires=Wed, 07-Dec-2022 08:05:57 GMT; Domain=clickwinner.icu; Path=/; HttpOnly

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3696
Expires: Tue, 06 Dec 2022 09:07:33 GMT
Date: Tue, 06 Dec 2022 08:05:57 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: Ok4722lWeJKFLaj0LIA8I2XH/s0kxbnDsrJEw1522DLZsctx0miE+6j232N8axXtut6qGG3MALA=
x-amz-request-id: WYFNPY794DC2KBNP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 07:47:01 GMT
age: 1136
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 08:05:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.r2m02.amazontrust.com/

54.230.80.227

200 OK

471 B

URL HTTP/1.1
ocsp.r2m02.amazontrust.com/
IP
54.230.80.227:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
a90d82b97eb778b25c4e9b877715bb1d
2aa8260da7c4e50dd936a8ea93d65a94df8d048e
36a5313e59876b5fe9c134f408eb6b5626a8deeda304e4519bfed9b5444b47f3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=162065
Date: Tue, 06 Dec 2022 08:05:57 GMT
Etag: "638ecdf6-1d7"
Expires: Thu, 08 Dec 2022 05:07:02 GMT
Last-Modified: Tue, 06 Dec 2022 05:07:02 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UsERjImdj3xvOljGeJXKnYk4eaw5sCpNcUC0Cvk3rZGvf_s4ss0ZHw==

officialwinner.xyz/1/prizewheel/cash/cicash/img/landers/prizewheel-fb/loader.gif

54.230.111.119

200 OK

5.1 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/landers/prizewheel-fb/loader.gif
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
GIF image data, version 89a, 50 x 50\012- data
Size
5.1 kB (5083 bytes)
Hash
ed786659a534e0d183c09a90c50abc9d
a6c3d90bfaa86a7cda490bc5d04c8939c31a414e
cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97

HTTP Headers

GET /1/prizewheel/cash/cicash/img/landers/prizewheel-fb/loader.gif HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/gif
content-length: 5083
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:18 GMT
etag: "ed786659a534e0d183c09a90c50abc9d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ckQ-lK67CueyOc1S7TCpP6rDoNxssjJ0m8o-_V5tIoNo8LjjPp0fIw==
age: 76420
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/landers/prizewheel-fb/notification.png

54.230.111.119

200 OK

449 B

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/landers/prizewheel-fb/notification.png
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data
Size
449 B (449 bytes)
Hash
bd5203f2cc9e7a9125e4575e029541b0
9fa565ab2f4b55da4735b79e529562252b3c9afe
db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f

HTTP Headers

GET /1/prizewheel/cash/cicash/img/landers/prizewheel-fb/notification.png HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 449
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:18 GMT
etag: "bd5203f2cc9e7a9125e4575e029541b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZvtzYnryeduQTmYj6uoh6iavE3gmXiqBY5u7Xh_w-stUgl4VO5ULow==
age: 76421
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/js/app.js?id=15b1bae461854d516179

54.230.111.119

200 OK

977 B

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/js/app.js?id=15b1bae461854d516179
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (977), with no line terminators
Size
977 B (977 bytes)
Hash
15b1bae461854d516179a34a8c9b5f08
330c1d191253fe07c5fe6b5af37872408f2e5904
1bd25e467ea078265aee433e0cf9732a7e127514304634590a2de17fb2330896

HTTP Headers

GET /1/prizewheel/cash/cicash/js/app.js?id=15b1bae461854d516179 HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 977
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:18 GMT
etag: "15b1bae461854d516179a34a8c9b5f08"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fnRByJoXXDhozeyUUXTPkxzd2gEkIU0NsSXp2_djwm73ghfKTqM-GQ==
age: 76421
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/css/app.css?id=c588c17324f2be0e0ec9

54.230.111.119

200 OK

33 B

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/css/app.css?id=c588c17324f2be0e0ec9
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
33 B (33 bytes)
Hash
c588c17324f2be0e0ec90a18f39e7d7c
69d360eddd15f527aac7f7e610346517732b7770
b83e8830b6b2f1253a78f90191cf1087e8fd7638831fd4c1376a7a6029297240

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /1/prizewheel/cash/cicash/css/app.css?id=c588c17324f2be0e0ec9 HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 33
last-modified: Wed, 16 Nov 2022 08:54:29 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Dec 2022 07:55:17 GMT
etag: "c588c17324f2be0e0ec90a18f39e7d7c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 57Z4lXw0U-wi92eFaxvmdptqjs93GKzh-Xr8eHP2UzqdjeFNJQjxpQ==
age: 642
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d

54.230.111.119

200 OK

36 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1243)
Size
36 kB (36443 bytes)
Hash
453d045035af73320bef8f49c0f39e7c
8a0e108935ecffe0caf4025dcdad61b62e005c15
f677d5ab5f413bb550370fe8be401f8caf174b7131a8206f689a88a5c221d040

HTTP Headers

GET /1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
server: AmazonS3
content-encoding: br
date: Tue, 06 Dec 2022 08:05:57 GMT
etag: W/"05ac9c3b2eb450c93879f4d7a563a6b4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IxRfrj0JbqgqnJArZJOc4sBvH8VkO3RF3a5xlQ4twZn0qp3wGfxuFA==
age: 72700
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6

54.230.111.119

200 OK

50 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (65475)
Size
50 kB (50495 bytes)
Hash
5512ac4e73acd3f412f98d38cf236f1f
888b58d8051ee0f52f64879872dec4025ec25d2b
932e28ec9382bb37e8b73fcb7d4a449bfe2c4c8354e21464675cafbbc87d2ef4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /1/prizewheel/cash/cicash/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6 HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
date: Mon, 05 Dec 2022 14:01:09 GMT
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
etag: W/"cdf97653c213f02233f50a1ec975633c"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M6sW5aKUtXIMLTqITsJ0f0bW9VRFGX98zS-16QVUbdN-UYxAyhE1mg==
age: 65090
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/landers/prizewheel-fb/prizewheel_static.png

54.230.111.119

200 OK

3.4 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/landers/prizewheel-fb/prizewheel_static.png
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1002 x 1002, 4-bit colormap, non-interlaced\012- data
Size
3.4 kB (3370 bytes)
Hash
dc484e0043b5ff6191b1880c8779863c
a5b67e3dff3dea3940eed090431aecbb36611b1d
30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6

HTTP Headers

GET /1/prizewheel/cash/cicash/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3370
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:19 GMT
etag: "dc484e0043b5ff6191b1880c8779863c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d4cr9lH9XBxXMLPzRLBpkGldMpdnP3c0YxRVAGnf7ILrlKoXT3HXFQ==
age: 76420
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/female/3@0.25x.jpg

54.230.111.119

200 OK

2.7 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/female/3@0.25x.jpg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.7 kB (2727 bytes)
Hash
2790f79b7e764407ae4b87a9dc30734b
30f0a1e4d30ac25108f2d0487f49944fbe630b72
8970ba9af5b39727ac25d42ab540c42ae7f58de4011fadb8efd2f5f317a8d575

HTTP Headers

GET /1/prizewheel/cash/cicash/img/profiles/african/female/3@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 2727
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:19 GMT
etag: "2790f79b7e764407ae4b87a9dc30734b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FakH7oa0vwcyGwhTVnJA1wrnXVv9e5R6aDi0lG4RzilK9xt5lpcOiA==
age: 76420
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/male/3@0.25x.jpg

54.230.111.119

200 OK

2.5 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/male/3@0.25x.jpg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.5 kB (2518 bytes)
Hash
2c188d082f97b0a5b29c92dbaf7a9787
f2a3828b68ba4d06d450832a977c48a22360d5eb
afc758b894177d4003b5d02d80cd023429c99cfc3cd880804570d237cf6a96f0

HTTP Headers

GET /1/prizewheel/cash/cicash/img/profiles/african/male/3@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 2518
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Dec 2022 02:06:04 GMT
etag: "2c188d082f97b0a5b29c92dbaf7a9787"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ev04YQJMd7UqR_S-GC1LVAPe3UQ2lVolwe8kU4KjC6_kx_SdZFXLKg==
age: 21595
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/male/10@0.25x.jpg

54.230.111.119

200 OK

2.3 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/male/10@0.25x.jpg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.3 kB (2302 bytes)
Hash
2ec37a714ba9202b2492cc1eff504041
29d005604784110044c80c13610ec1fe946a7d83
278b0f8b52650d39e549fc69ea49d62d3bdd0c41b3ffd939da265842b6e40369

HTTP Headers

GET /1/prizewheel/cash/cicash/img/profiles/african/male/10@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 2302
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:19 GMT
etag: "2ec37a714ba9202b2492cc1eff504041"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SsmsVx7K6u5E9JTjmty08WWr6odxAsCP9k9xFSDLfYefk46qzAS1eg==
age: 76420
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/female/6@0.25x.jpg

54.230.111.119

200 OK

2.8 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/female/6@0.25x.jpg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.8 kB (2766 bytes)
Hash
af242991b9a56424739c63a6bd4090a7
7b41b3b2cfbbe69a865efa8863883bf029738b6e
c53bda952fa4ca1869dfb4fd7db948ef87f1a8c8f2e6633e2320465f01f0829f

HTTP Headers

GET /1/prizewheel/cash/cicash/img/profiles/african/female/6@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 2766
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Dec 2022 05:33:26 GMT
etag: "af242991b9a56424739c63a6bd4090a7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ImY_P4b1h2mpkMDh3wnifv3fpxuCBkyp5qbrOjvR3voD9bosoXUTyw==
age: 9153
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/prizes/iphone-12-pro-max/default@0.5x.png

54.230.111.119

200 OK

46 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/prizes/iphone-12-pro-max/default@0.5x.png
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x408, components 3\012- data
Size
46 kB (46219 bytes)
Hash
1d0161be32fbf1c6f1db3cd113d51f74
4c859e2ed84db0559c0fa37deec966f54315e65b
560fa4b21e4aa791e9d7027f7191f3cae2af6bda293be1753ae89c3b79c13871

HTTP Headers

GET /1/prizewheel/cash/cicash/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 1686068
date: Tue, 06 Dec 2022 05:38:42 GMT
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
etag: "e1e0a38797c05992c876a4c5763bfcbb"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QmZdEmEAlfatVQ7d6nJKMnEpRhDC1_Nta7Kt52mUPY4ddj4Qf9dHRw==
age: 8836
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/female/5@0.25x.jpg

54.230.111.119

200 OK

2.0 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/female/5@0.25x.jpg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.0 kB (1960 bytes)
Hash
732da0e5f3968ec3d9014a6bbb62c04a
5d306c8778fdcac19f03542fccaf31df1cb8a783
d3eefd5709b25e1bb1129cccb1da22e54816cb2d15a2ed4cfa045b57579a7ef8

HTTP Headers

GET /1/prizewheel/cash/cicash/img/profiles/african/female/5@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 1960
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:19 GMT
etag: "732da0e5f3968ec3d9014a6bbb62c04a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KVXrmh8uH_w0PSyayH8wz2MjYdZfascd9SrB7qyqbvmv72wfm-UXmA==
age: 76420
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/female/1@0.25x.jpg

54.230.111.119

200 OK

2.8 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/female/1@0.25x.jpg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.8 kB (2781 bytes)
Hash
9ef452251daa9ff9fbdc5fe827a35061
2cb40a02efce5fd8772f57b8e9737018fed3f9ba
355126576c7a0bdbbe771a2b039d093c855efe6805941a36456324a2076e2ce1

HTTP Headers

GET /1/prizewheel/cash/cicash/img/profiles/african/female/1@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 2781
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:19 GMT
etag: "9ef452251daa9ff9fbdc5fe827a35061"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _D_-7N2xJToI__TD_udIc1aJkYkPF3rDcHPqFAaF-LVB3gUrMLBydA==
age: 76420
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/male/9@0.25x.jpg

54.230.111.119

200 OK

3.1 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/male/9@0.25x.jpg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
3.1 kB (3146 bytes)
Hash
4c30d4f61201b822adcfa58dbe32389c
9d9edd23a3b074135d9e043b5d1e52d8dbe29c91
19d491c137daf159170ed6d6340c33b11806347b18b2e89840989b914346d9f4

HTTP Headers

GET /1/prizewheel/cash/cicash/img/profiles/african/male/9@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 3146
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 11:54:23 GMT
etag: "4c30d4f61201b822adcfa58dbe32389c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xpRNS_1BGWjBg-7bzniY-wQUvict2yMkEa9vbZUbid7mBiKyI59FVw==
age: 72696
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/male/2@0.25x.jpg

54.230.111.119

200 OK

2.1 kB

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/profiles/african/male/2@0.25x.jpg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Size
2.1 kB (2053 bytes)
Hash
0f15632c24d4646c58f30feaa3baaa8a
a7f319366432f5a63d7f11d30b0a6c9cb6398b64
4118d09fb21a7f34160f470078f6dcba042e8a07e2b4e32de12a4dcd9c5e7da8

HTTP Headers

GET /1/prizewheel/cash/cicash/img/profiles/african/male/2@0.25x.jpg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
content-length: 2053
last-modified: Wed, 16 Nov 2022 08:54:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Dec 2022 10:52:19 GMT
etag: "0f15632c24d4646c58f30feaa3baaa8a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4yccf6x-KD-2_aNbJesbA90Zwrv-mdP0niJDCponvBKbiqTu-OMzQw==
age: 76420
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3833
Cache-Control: max-age=93887
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 08:05:58 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 10:10:45 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9ea9df20493b2419fcbd8265d33f1aa2
f4fbfdbc5ea1a3019469bfd309b4a878426fbea2
183eb2d88272dde00427a535ed06ca80c97f0143cbb93dd4b46413ec6e02cee2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "183EB2D88272DDE00427A535ED06CA80C97F0143CBB93DD4B46413EC6E02CEE2"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21588
Expires: Tue, 06 Dec 2022 14:05:46 GMT
Date: Tue, 06 Dec 2022 08:05:58 GMT
Connection: keep-alive

push.services.mozilla.com/

54.188.211.138

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.188.211.138:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Z0WRGPbF+KYSCYdPcErYhw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +2NLg+k3lUe3nKI7cn4qffeqZIc=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17884
Expires: Tue, 06 Dec 2022 13:04:03 GMT
Date: Tue, 06 Dec 2022 08:05:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17884
Expires: Tue, 06 Dec 2022 13:04:03 GMT
Date: Tue, 06 Dec 2022 08:05:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17884
Expires: Tue, 06 Dec 2022 13:04:03 GMT
Date: Tue, 06 Dec 2022 08:05:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17884
Expires: Tue, 06 Dec 2022 13:04:03 GMT
Date: Tue, 06 Dec 2022 08:05:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17884
Expires: Tue, 06 Dec 2022 13:04:03 GMT
Date: Tue, 06 Dec 2022 08:05:59 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9354 bytes)
Hash
2e11524d75503e35c404d6c9a12ac540
5626b75f5c2523f1a0fc301839a06a4e2407f106
d5eb74d026014c0a68893bde1107a9a111b1f0af835e28bb740308017ef80b7f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00b01871-cd98-4bab-b47d-4a29bb438277.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9354
x-amzn-requestid: fb2dad44-2f8c-4f02-bbc5-405e9586e5af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmctYGLdoAMFyDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e55-28b5680933de0ff4208240be;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6jWrhftx7tANXoWkKtCCjzm66zJDY13bpoA-7qVaZJNHEGsJS8dniw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 04:05:41 GMT
age: 14418
etag: "5626b75f5c2523f1a0fc301839a06a4e2407f106"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10183 bytes)
Hash
99d1ff8fa2e095dcf2bda3d1e1af1221
f914f04a0e1fb45a221d31d2105bfc73015b03e6
90325d4299a44dbd213857ada6f6880db8c33ad61685cfcb60c4a2455a84cf87

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10183
x-amzn-requestid: 557e6b38-7be9-4953-968b-2e5bd3491ef4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUDYEQbIAMFwRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66e2-1fcd8fc4719bc0bc7d11abd2;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z1_zJTJMuk724WMOmIc660b54AyZK8ffNVF5N7ehZ00W2kaL3Lcd1A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:47:14 GMT
age: 37125
etag: "f914f04a0e1fb45a221d31d2105bfc73015b03e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

16 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F42536ef2-6e40-4541-ac60-0ff74058daa7.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
16 kB (15732 bytes)
Hash
b5e953213b7b13b8ee202406147fac52
67a09d8cd23ed444667b225f7fbf4bb17b9f42dd
cf6b2502f0a992148f9401c16a329cae5a6c21fb81f03131f3e69c58bc608110

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F42536ef2-6e40-4541-ac60-0ff74058daa7.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 15732
x-amzn-requestid: 7467ddb0-b9f9-47e9-ac31-c7599fe45698
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csVIIESBIAMFU6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e689a-79e3f8b66e1cf72f3283ac5b;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:54:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3seQ7H4qrlKKpuIWUobiey92ZMkB4jWqd5v6T6379g0V0y6XdVFvWQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:22:21 GMT
age: 35018
etag: "67a09d8cd23ed444667b225f7fbf4bb17b9f42dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f48f157-f5b1-44b8-91c0-da7927555031.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4905 bytes)
Hash
17c7b7e3a4e6f3ad9ccf7f42c400749c
76432db96e8280e24da56670fba8f8f80a95ab31
f67d401ebc225c2a9dac5b4f98dc969e22f927455c2537df353ac86f046cc4c4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f48f157-f5b1-44b8-91c0-da7927555031.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4905
x-amzn-requestid: d80a0dd7-01ec-4801-a5b5-6a1b01eb1944
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csTMSHsyoAMF6BQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6581-177e519d6dbd1875555b0961;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:41:21 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KmaWXiNE4GPEU9-X5rhVcEsUak4C9m-mjdTCdFUFCPFj8f2uGwCvcQ==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:46:52 GMT
etag: "76432db96e8280e24da56670fba8f8f80a95ab31"
content-type: image/jpeg
age: 37147
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8450e32d-c4fa-4c40-82bc-1c36f479692e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (8978 bytes)
Hash
dd0fdca9dfb3e18fcbb5c89e12922da7
d8acf7053a01df2c503c734d52070ff4802d5a01
61e6235613c8ecda0321ecbe0870419bfa65cf3e44e3b85acd257f78725a6843

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8450e32d-c4fa-4c40-82bc-1c36f479692e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8978
x-amzn-requestid: eb1d3e42-f07c-4b92-983e-a40e2e2eda31
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csWdTE5goAMFRKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6abb-734e39b84aeb2370277122f0;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 22:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rtVWLjbbjO2z-TlZqURPHGqbMJOSNd0yEFuYUnE3FGVmypSDqxaXwg==
via: 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:17:59 GMT
age: 2880
etag: "d8acf7053a01df2c503c734d52070ff4802d5a01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11224 bytes)
Hash
b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: YVR50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGtiCE9C3j0BUruNaFN2j1mKxCSouLmocmTXpmLMBJaLNyVwkXu1gQ==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:23:09 GMT
age: 34970
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

desekansr.com/zone?&pub=0&zone_id=5378963&is_mobile=false&domain=officialwinner.xyz&var=&ymid=&var_3=&dsig=&action=prerequest

139.45.197.250

200 OK

0 B

URL HTTP/2
desekansr.com/zone?&pub=0&zone_id=5378963&is_mobile=false&domain=officialwinner.xyz&var=&ymid=&var_3=&dsig=&action=prerequest
IP
139.45.197.250:0
ASN
#9002 RETN Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

POST /zone?&pub=0&zone_id=5378963&is_mobile=false&domain=officialwinner.xyz&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1
Host: desekansr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://officialwinner.xyz
Connection: keep-alive
Referer: https://officialwinner.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 08:06:06 GMT
content-length: 0
x-trace-id: dc145cd6dd79814b67c5270c4b894a1d
access-control-allow-origin: https://officialwinner.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/img/fb-like.svg

54.230.111.119

200 OK

0 B

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/img/fb-like.svg
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /1/prizewheel/cash/cicash/img/fb-like.svg HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Wed, 16 Nov 2022 08:54:29 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 05 Dec 2022 08:11:35 GMT
etag: W/"765203989756e91925e8f947e660b644"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RmKDfFFFXrLw5mzFF7PeF71ubWDYMV-Q2LeIzZQfIXbLhHYlkPanNg==
age: 86064
X-Firefox-Spdy: h2

desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js

139.45.197.250

200 OK

0 B

URL HTTP/2
desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js
IP
139.45.197.250:0
ASN
#9002 RETN Limited

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js HTTP/1.1
Host: desekansr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 08:05:58 GMT
content-type: application/javascript
last-modified: Thu, 01 Dec 2022 15:42:46 GMT
etag: W/"6388cb76-9a87"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

officialwinner.xyz/1/prizewheel/cash/cicash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444

54.230.111.119

200 OK

0 B

URL HTTP/2
officialwinner.xyz/1/prizewheel/cash/cicash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444
IP
54.230.111.119:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /1/prizewheel/cash/cicash/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1
Host: officialwinner.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialwinner.xyz/1/prizewheel/cash/cicash/index.html?brand=Desktop&domain=clickwinner.icu&cep=FMolMJbIGRo8YcSwazuIyHU0KO9nlXOStYDmURNRaZE3L3fp9hH8oTGxoIFTZ_ZT_oYLA5ogD5yPQcjJNMzrIPIMDAHyJqjN540QUGBps2MnsLFnCe1awpgzx3M9oI9qkpwxyzwSqQrPMvIxqMzBuFlCJeFaBd5eOodP0G19JZ79ejIccd-jqbbjQlgE_gpla8sbysciv3odRMT7vyxyIBcYAG_dLdlQ9gZGPbcJ16TIqwQytqWeEcOsIwGTvv9alX8YEPmk3w_qh9OL2qaY3GFSOoxjOygI5fTKlsZ5Yjdn7GFx3iZHoP4uQ3QnOZFZ4s_qpKLJNMv1Nvmxd8xddyA1z8vC3K3cPqxMememLsA&lptoken=16897035313557b6570d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 16 Nov 2022 08:54:29 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 05 Dec 2022 12:44:57 GMT
etag: W/"cd41123a11e97e0f2444b57d180631a0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MHkY7W0DLB5nu66jMrnRcf8dTOXGzbRgVzfZ1C4-_jerywmeZA6QUQ==
age: 69662
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash