| braokeextrefore.com/91a68ce6-3574-4426-9e80-031126a36984 |  3.124.99.72 | 302 | 0 B |
URL HTTP/1.1braokeextrefore.com/91a68ce6-3574-4426-9e80-031126a36984 IP3.124.99.72:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /91a68ce6-3574-4426-9e80-031126a36984 HTTP/1.1
Host: braokeextrefore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Fri, 27 Jan 2023 21:39:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Pragma: no-cache
Set-Cookie: 91a68ce6-3574-4426-9e80-031126a36984-v4=7YvGVOoGE8RfDL9UdN9DCiZaLVR7k0rhpPSx5J9kxdE; Max-Age=86400; Expires=Sat, 28-Jan-2023 21:39:50 GMT; Domain=braokeextrefore.com; Path=/; HttpOnly
cep-v4=CpyD7pdCBt-i2tjvhYTbMmzENMHd8xqNBTbtIQT92UlTEzAiZ_MId4J2g-toWrbR3AYnVayalRss4x5r4dV5mfTpet6YqxA6cdsDzf4RmM500vx87DuEOGM2h-IUOSF2Oc2FMBHq58UP6zivogZIKZkABWl6Uujf3XFYw49Eoq7YiwvrT3cngpw5XVZSG6iaWBYAyozGM7QBYpxhGBf9HTRlYIR2_ztTAU2yLuzsGOuzWXJ2o-_LGqATmjw2wZJv_CX7rnJ29l-15YwUk-5REWP0dJ9dl4gaQcd0MAaxvLLTKuBwJMApUX5y9WhyChcYreWDIpzaee0duMJkO3J5hau5n8bpebY_SvVvJpXdTly7CJtkx-cIQ-gyWd1dAHfQ; Max-Age=86400; Expires=Sat, 28-Jan-2023 21:39:50 GMT; Domain=braokeextrefore.com; Path=/; HttpOnly
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2405562765b49b2782ebd2e2994851d5 be7ac8e558f7875bb1fb86ab5ec674424a5ff269 422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12873
Expires: Sat, 28 Jan 2023 01:14:23 GMT
Date: Fri, 27 Jan 2023 21:39:50 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha2104f935c638b4767ca5ae0d738ef23 85c6af15af749be0ceeae6de17c36925b750f166 5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9891
Expires: Sat, 28 Jan 2023 00:24:41 GMT
Date: Fri, 27 Jan 2023 21:39:50 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 21:35:24 GMT
content-type: application/json
age: 266
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash69f73ac59327cd9ad7d99816ccfcc03e c54844f82dbee0d5ee4c8ce344eb0139373e6c6b e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5921
Expires: Fri, 27 Jan 2023 23:18:31 GMT
Date: Fri, 27 Jan 2023 21:39:50 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: T0qDY1nUBnvTq7uRmjyGL8hWxeskSPj7Lm4auIkbJTeBduZlqXXHnVE8/L4Q15qGTgRl2zknoyw=
x-amz-request-id: ENG8JDHSB74EVBSB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 21:20:41 GMT
age: 1149
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 21:39:50 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.39 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.39:0
Hashd6622780ca1b20f8d3372266ea9d6d11 cafe5c15a020b787581fe26ce62e0df3da8c8a9e ded28c6729264e0f82a55f05228663808215b264753b381f58a4b3d51b363bcd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=167929
Date: Fri, 27 Jan 2023 21:39:50 GMT
Etag: "63d4319f-1d7"
Expires: Sun, 29 Jan 2023 20:18:39 GMT
Last-Modified: Fri, 27 Jan 2023 20:18:39 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IRZc2CgKVcLL3zV258qyrHJXN_q60-_ncs1jDRqlczH282XCM4ui6Q==
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/flag.png | 54.230.111.98 | 200 OK | 250 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/flag.png IP54.230.111.98:0
File typePNG image data, 50 x 25, 8-bit/color RGBA, non-interlaced\012- data Hashd4923d9d533d7b819ec5143f8a2e7f10 761b4e91119a94dd68b196799c12d7e90e554a64 cd3d0a5dcb26e4f8729c8b79eff80195b0720881b45ddd1f1f62a108e28f5cdf
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/flag.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 250
last-modified: Mon, 03 Oct 2022 07:18:32 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:41 GMT
etag: "d4923d9d533d7b819ec5143f8a2e7f10"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jacHxOVOAkRE-UctULWAaVHLTuxcBlbytwEzxk2e0xYIGGEMS-A1VQ==
age: 39731
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.png | 54.230.111.98 | 200 OK | 3.8 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.png IP54.230.111.98:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 82x116, components 3\012- data Hashf63f5f70fcb07519a5008b64b208f6bf eac1642abf2967754585b88d7a3da3deaeb84a20 217ad1a4b0f73761f28086e0a0b5e7cc098474eaa83c0732e01eb33316b75030
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3770
date: Fri, 27 Jan 2023 04:14:29 GMT
last-modified: Mon, 03 Oct 2022 07:17:45 GMT
etag: "f63f5f70fcb07519a5008b64b208f6bf"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7hDy1AXIw1zdmrdvvvECK8-h2iHnWmwb-16Lug-jjnXWYerIe4L--g==
age: 62723
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/pw_ix.png | 54.230.111.98 | 200 OK | 117 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/pw_ix.png IP54.230.111.98:0
File typePNG image data, 502 x 502, 8-bit/color RGBA, non-interlaced\012- data Size117 kB (116858 bytes) Hashd43fde05ae0717361faaa6520a8cce7f 846043a1567c2ca9878824f221cc174a71d177cc 349c952851c8a464e3364ce23cf6a6ee92d98ffa64e4da5859120175e14ac39b
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/pw_ix.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 116858
last-modified: Mon, 03 Oct 2022 07:17:57 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:41 GMT
etag: "d43fde05ae0717361faaa6520a8cce7f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fDuGPghvNSfMXqmwdKKgLvaGgXf5jbgnaF89Vul9KUTO1o7fI_rJVA==
age: 39731
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.jpeg | 54.230.111.98 | 200 OK | 3.8 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.jpeg IP54.230.111.98:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 82x116, components 3\012- data Hashf63f5f70fcb07519a5008b64b208f6bf eac1642abf2967754585b88d7a3da3deaeb84a20 217ad1a4b0f73761f28086e0a0b5e7cc098474eaa83c0732e01eb33316b75030
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.jpeg HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3770
last-modified: Mon, 03 Oct 2022 07:17:43 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:41 GMT
etag: "f63f5f70fcb07519a5008b64b208f6bf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L9LjctIaMAdov38q__uCBTMa-G05vA0HKWZ9uTpjutlaV6Uhkud5WA==
age: 39731
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/io-s.jpeg | 54.230.111.98 | 200 OK | 3.8 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/io-s.jpeg IP54.230.111.98:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 82x116, components 3\012- data Hashf63f5f70fcb07519a5008b64b208f6bf eac1642abf2967754585b88d7a3da3deaeb84a20 217ad1a4b0f73761f28086e0a0b5e7cc098474eaa83c0732e01eb33316b75030
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/io-s.jpeg HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3770
last-modified: Mon, 03 Oct 2022 07:17:40 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:41 GMT
etag: "f63f5f70fcb07519a5008b64b208f6bf"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mx2lbZLz5-TrN6XaemVtUbP4iGQQedvrAkmFFtpDiyVBzhe_2TucJg==
age: 39731
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/ix-g.png | 54.230.111.98 | 200 OK | 16 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/ix-g.png IP54.230.111.98:0
File typePNG image data, 71 x 120, 8-bit/color RGBA, non-interlaced\012- data Hash60b9ad5e285cd3f1acdd3421f221988b 02dbabf1450da1eb4ef7ed2d5525f9f1f53e4aa2 d862a29baa861ea1b4aa89b9574ed1d0928a324947eeca509604d91524bb7f53
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/ix-g.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 16034
last-modified: Mon, 03 Oct 2022 07:17:46 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:42 GMT
etag: "60b9ad5e285cd3f1acdd3421f221988b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ctMbtbRitlxG1dK5TiJozJPE8hgxtw-7h-b7fUJFUvnGTpines4p4Q==
age: 39729
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_2.jpeg | 54.230.111.98 | 200 OK | 1.2 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_2.jpeg IP54.230.111.98:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hashf9299c2023539a8f27a6e1b12ed260e5 046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2 ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_2.jpeg HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1216
last-modified: Mon, 03 Oct 2022 07:17:51 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:42 GMT
etag: "f9299c2023539a8f27a6e1b12ed260e5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yj8gD9MJsCoZiBpkF6bqPW1mHxOfXbYNIaIcLPzAXjaOsjGoXmQjHg==
age: 39729
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_1.jpeg | 54.230.111.98 | 200 OK | 1.3 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_1.jpeg IP54.230.111.98:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hash2aa0d43e70d60d76ac4bdff139f8c7cb d7e3433297ad90f5d99249aee29b645265c9f3eb e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_1.jpeg HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1293
last-modified: Mon, 03 Oct 2022 07:17:50 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:42 GMT
etag: "2aa0d43e70d60d76ac4bdff139f8c7cb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: d8_m6zLTAmxGdi7VY5mVreu3DCGsZ9BVBFEIIj_1LlboqKS6kBGcIQ==
age: 39729
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/2.png | 54.230.111.98 | 200 OK | 7.5 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/2.png IP54.230.111.98:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hashda7cc2998a21ddf7130c735969273324 4f6dda472cf0032b8f74af36ae92ab72508eba89 d999601d6133555fae4bec88f1c74611764d1b96e2d21b69bd0e9334bbfa8f83
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/2.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7535
last-modified: Mon, 03 Oct 2022 07:18:21 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:43 GMT
etag: "da7cc2998a21ddf7130c735969273324"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V0TX5jsjxTUFRDq6S9GxeiwOkP8Dwt66tUXCKpKrMWF8Fkh-G6iCEQ==
age: 39729
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/4.png | 54.230.111.98 | 200 OK | 5.9 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/4.png IP54.230.111.98:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash3155fa2791143fb66e0f95eba65c3839 3f6ae8be8c0f15000eeb695db68032784af26a17 331491402695a705f84b26a92a991c9502546d038e2ab40f23b2e0880d159c34
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/4.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5885
last-modified: Mon, 03 Oct 2022 07:18:23 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:44 GMT
etag: "3155fa2791143fb66e0f95eba65c3839"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XlaoGg0NLPe0ATIF-ehU6FYK7H4bEEK5EhG5g4GDDavpaqldWmfONg==
age: 39728
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/3.png | 54.230.111.98 | 200 OK | 6.5 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/3.png IP54.230.111.98:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash00fa0b32cc38f2a210cca7c65da1e096 45bc9e601d66f6345a6663b4ae73eeed0bf096c4 caba0ba1250cf009bcd7ea9e4bd5a0cce301e42188097c168657360eb5e31a0c
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/3.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 6499
last-modified: Mon, 03 Oct 2022 07:18:22 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:43 GMT
etag: "00fa0b32cc38f2a210cca7c65da1e096"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lnfMSLI9bsWoDusT8k2kW9k5uhsqqvGIwc7veWxMon618hqElbv8xQ==
age: 39729
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/6.png | 54.230.111.98 | 200 OK | 7.7 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/6.png IP54.230.111.98:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash449afc170798e48c606a73248108eef2 54b3f86bc09bf2510cbe281fef9d740e33a7cf87 afd0faf40e0380547aca02ff42c595e02e4fa260f4cc03fecc53189a5e09528e
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/6.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7699
last-modified: Mon, 03 Oct 2022 07:18:24 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:44 GMT
etag: "449afc170798e48c606a73248108eef2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FQYD3gVXgRfYVA0i13DjnFoc-x5knp--lqGPf5_BXfhh8mpq2T07Ng==
age: 39728
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/1.png | 54.230.111.98 | 200 OK | 5.9 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/1.png IP54.230.111.98:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash0c5129c6988d22f21226689ed8668cbe 045298cf2182ac48ff17ac2d43c5c607735dc62e a9ae4b9516a1f4eca4b570a4f0c5d61edfc8fc293c64cb6d8753b1d29128cd5e
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/1.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5927
last-modified: Mon, 03 Oct 2022 07:18:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:44 GMT
etag: "0c5129c6988d22f21226689ed8668cbe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LbVW1zHDGJuhacjqRZQbC8ZgkSpY7E2yktDc3-aTP5xB_wn-8uFOEw==
age: 39728
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/8.png | 54.230.111.98 | 200 OK | 10 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/8.png IP54.230.111.98:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash9747b31d04a0789d324770bdf9fc8e68 b5df303236ba0ac386629beec8e861635d6d5fc8 db8f36b502796126356b0af088ab3a6f2ed84d42006617ca23e949928cb3d3a4
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/8.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10041
last-modified: Mon, 03 Oct 2022 07:18:26 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:44 GMT
etag: "9747b31d04a0789d324770bdf9fc8e68"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yT4BHAh09UmSoTyrz7MsbtjBwCh5XkCwwTu9BhG04ja-xJKUmtBH-w==
age: 39728
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/clip_footer_3.png | 54.230.111.98 | 200 OK | 2.5 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/clip_footer_3.png IP54.230.111.98:0
File typePNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data Hashe1b626392882cc25b4d891afaa68afd4 454d7abdbc2548d04feb95436ea0ab4126b4f00b ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/clip_footer_3.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2460
last-modified: Mon, 03 Oct 2022 07:18:29 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:44 GMT
etag: "e1b626392882cc25b4d891afaa68afd4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yTh8hTEOz5tmYNn3A8WxKKmVPygb-niJa2YtysYbHZArSHnk0OgatA==
age: 39728
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/footer_right.png | 54.230.111.98 | 200 OK | 4.9 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/footer_right.png IP54.230.111.98:0
File typePNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data Hash0e786b7344ac0b63609290a3a415fc4f c2e77827e895aaa13522f1c5c0ef79d4caef0bb2 f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/footer_right.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4919
last-modified: Mon, 03 Oct 2022 07:18:32 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:44 GMT
etag: "0e786b7344ac0b63609290a3a415fc4f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _hE4tPe3BAnX6KcKfcJ5tno3firQbt6phcA2LQ4ezpFG2OCIOZzvzg==
age: 39728
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/7.png | 54.230.111.98 | 200 OK | 9.3 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/7.png IP54.230.111.98:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hasha710a588b037577ed57124e3470e083e c45e56c9694b7cbd30bb5e28952be5afc4ded802 76cde0a0c13f4b36c10234d3ed83aafe81e3ab44ef7b70d4eb11824aad9b093e
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/7.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9323
last-modified: Mon, 03 Oct 2022 07:18:25 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:43 GMT
etag: "a710a588b037577ed57124e3470e083e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GFxQnRcJf7AZKxlI0kAwjj8EKj0ErWLIdqGetoXQMmvIjnUSHWX1Zw==
age: 39729
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/menu_2x.png | 54.230.111.98 | 200 OK | 124 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/menu_2x.png IP54.230.111.98:0
File typePNG image data, 40 x 36, 8-bit gray+alpha, non-interlaced\012- data Hash8f68efd9388ccd80b43759b2ed542305 9f2cf96efe3bdec2ab64bc51856619cc02958fe6 455b82fa1e54fc88fe0699eabecb02155f1d6228e0ae3d7f72e1abe92dae8f3c
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/menu_2x.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 124
last-modified: Mon, 03 Oct 2022 07:17:55 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:45 GMT
etag: "8f68efd9388ccd80b43759b2ed542305"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3NrsUWAK-X_y_F97s158zfH8eO2Xw9_7EudVQbIPt063xf9KUNkUkQ==
age: 39727
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/action_icons_20px_2x.png | 54.230.111.98 | 200 OK | 1.7 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/action_icons_20px_2x.png IP54.230.111.98:0
File typePNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data Hashb699975b5fe73b087e711a33ff24ee1e 0e33cc5c32a5e7d18440751e3946076664caaf53 4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/action_icons_20px_2x.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1726
last-modified: Mon, 03 Oct 2022 07:18:27 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:46 GMT
etag: "b699975b5fe73b087e711a33ff24ee1e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DI08EvhgU-3VikltuokUDUEeDcOw4aMp4Tc82K5Cv0fiZbn3ZZ4pWQ==
age: 39726
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/spin_prize2.png | 54.230.111.98 | 200 OK | 2.8 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/spin_prize2.png IP54.230.111.98:0
File typePNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data Hashf278c8d30fc51b72e0774b9ecb49214c 03b574db82b31ee5758eb5093fda8ea25d1b00d8 43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/spin_prize2.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2814
last-modified: Mon, 03 Oct 2022 07:17:58 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:45 GMT
etag: "f278c8d30fc51b72e0774b9ecb49214c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xUnB0D7tiVXgq_8aRAtyaJFxDOL2xfxGIiQZK7frg_k72OS8gf1cSA==
age: 39727
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/comment_action_2x.png | 54.230.111.98 | 200 OK | 641 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/comment_action_2x.png IP54.230.111.98:0
File typePNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data Hashe9b3872b3e63e19728176d45f0aa6986 b638f89d5d80c4cd65327da973c52f778e30bd55 a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/comment_action_2x.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 641
last-modified: Mon, 03 Oct 2022 07:18:30 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:46 GMT
etag: "e9b3872b3e63e19728176d45f0aa6986"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Jowp7txcjmHzv0q2AbCdDsO-yFf3-ov6B9eR4UAoIfXAGAT7lCA7Tg==
age: 39726
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/notify_2x.png | 54.230.111.98 | 200 OK | 229 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/notify_2x.png IP54.230.111.98:0
File typePNG image data, 36 x 32, 8-bit gray+alpha, non-interlaced\012- data Hash988234626ae7a880ed9c6a92f6336c0f 173967c2b59baed4a06997d874aba32ab65da201 4566dd8f59a09f51415a7c8955f48f75298522fc6db554bc1a59ad79c3e3e314
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/notify_2x.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 229
last-modified: Mon, 03 Oct 2022 07:17:56 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 27 Jan 2023 10:37:45 GMT
etag: "988234626ae7a880ed9c6a92f6336c0f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 175Kdd5BMA9LSrfraC_5TA9e1GMRtuOUValep5f1z5C7zWY37SDE2A==
age: 39727
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash16a7b6a7128312e2f985d30df18c4487 6017bff79ffb525d9c7f9f32b999b74b5dc69602 663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11781
Expires: Sat, 28 Jan 2023 00:56:12 GMT
Date: Fri, 27 Jan 2023 21:39:51 GMT
Connection: keep-alive
|
|
| hop.greenbluefrog.click/js/pub.min.js | 108.178.23.115 | 200 OK | 1.5 kB |
URL HTTP/2hop.greenbluefrog.click/js/pub.min.js IP108.178.23.115:0
File typeASCII text, with very long lines (2752) Hash31c303586c1b78e33984bd252b8e2644 8083e2aad4cbf8242a4e6fb53657d49552b85f82 d2c713c2734353dc0ef2896d057021e9b04f35bb7c851d920d390941769c66be
GET /js/pub.min.js HTTP/1.1
Host: hop.greenbluefrog.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 21:39:51 GMT
content-type: application/javascript
content-length: 1482
last-modified: Fri, 09 Sep 2022 11:46:08 GMT
vary: Accept-Encoding
etag: "631b2780-5ca"
content-encoding: gzip
expires: Sat, 28 Jan 2023 21:39:51 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.200.117.177 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.200.117.177:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IceUSzY8EaaTr6gPsEfbWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wi6UgAdufW6ZYwEYID585eILSWc=
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 20:49:03 GMT
age: 3048
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7510
Expires: Fri, 27 Jan 2023 23:45:03 GMT
Date: Fri, 27 Jan 2023 21:39:53 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7510
Expires: Fri, 27 Jan 2023 23:45:03 GMT
Date: Fri, 27 Jan 2023 21:39:53 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7510
Expires: Fri, 27 Jan 2023 23:45:03 GMT
Date: Fri, 27 Jan 2023 21:39:53 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7510
Expires: Fri, 27 Jan 2023 23:45:03 GMT
Date: Fri, 27 Jan 2023 21:39:53 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7510
Expires: Fri, 27 Jan 2023 23:45:03 GMT
Date: Fri, 27 Jan 2023 21:39:53 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf62e9b7bdca82d18c945851912d8fea8 a7ca44d337c43bc5c6145b26778661c71cc50484 5da02cc405c1cada55813ffe376844375f1d6ad222cbb63405348b1f5132a0b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9595
x-amzn-requestid: c257bfbe-1bd7-4540-bbfa-e4c49a2624a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXwfGigoAMFvBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a002-226c08656eeefbfa3c2dddb6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k9njnQmggD7UkVJzZqSzo90HJJjTjGK0QIoPU0HWYKrSstjM6s1rOw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:57:18 GMT
age: 85355
etag: "a7ca44d337c43bc5c6145b26778661c71cc50484"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashba0a42dadf6a976df148f652e9cc1844 4d825b74865effa4a858ddcad1d0969671facc07 7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MeE0Qrn_yZvUApGQTbOKQ14Z2ipPLbPFPyVqkKTk0Bs7ETn0UU6yMg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:48:43 GMT
age: 85870
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5e7158416f60576804ccff03307319fe a342f94625e913fa6b8d862a59979f1e3ad80dd1 5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: 23239d1f-0228-4722-b826-40dc8c9a4af2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVzDbEacIAMFZtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d23215-1604c24e272fbb657b9925cc;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:56:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lkM4qVkPHqOdWwmxP2ShOgbbR6fjFtWmdavpgPyn7SQDkuggfHad7g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 12:26:22 GMT
age: 33211
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb7a0759c043594fbe85af422b59b8227 a05cfaad16078f42218dae233da38f6f5dff8487 e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 23:01:22 GMT
age: 81511
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash869cdfba2637cc932ce387317a3c485e 51d87a5223d87c959bf27b2a825dce0a28f52ada 6dc4247dd3110836195f9962463bd8265be89633e9e589bf19955991751c26fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5669
x-amzn-requestid: 17f6235c-d495-4813-9453-407331e0dcad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1ZSH4fIAMFxeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c3b-67ff5c7f416727670e7c3b21;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uBZkutqH9dy9U8-_i3LISu9nYOtCTP8YtgxvgZVywkDx7bRzLjqUhw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 04:27:02 GMT
age: 61971
etag: "51d87a5223d87c959bf27b2a825dce0a28f52ada"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg | 34.120.237.76 | 200 OK | 9.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashdc869235086902c4acc379733b6bfdb8 0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae e614e29b14e69209fd4b82a688290f7a3f541909833a6558cf480aca899bab6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9056
x-amzn-requestid: 81cf473d-8dc6-49e7-b012-d0b7dfaec7f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fB4COHTlIAMFtRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca3a0e-0848461c054db5c66fde9107;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 06:51:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fdefZSZfSJi1-C7ZTSahawckLN-To4P91H-n1cyPqw34f18VzTeHRg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 12:53:58 GMT
age: 31555
etag: "0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/favicon.ico | 54.230.111.98 | 403 Forbidden | 0 B |
URL HTTP/2www.better-luck.xyz/favicon.ico IP54.230.111.98:0
GET /favicon.ico HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 27 Jan 2023 21:39:51 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0g4If51Yv2Rr2DiK7PdIccSQmDNpsKs2iDu0421wO1-uC9eHEdG98g==
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036 | 54.230.111.98 | 200 OK | 0 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036 IP54.230.111.98:0
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036 HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
last-modified: Mon, 03 Oct 2022 07:18:34 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 27 Jan 2023 06:10:32 GMT
etag: W/"20c26abb54e3a3a9992598ac67212099"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U-C0EbkuDq8fMOGzLuS70J60I73EdqUdWzWttk5Zq-gQAJi7VQk-WA==
age: 55760
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css | 54.230.111.98 | 200 OK | 0 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css IP54.230.111.98:0
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Mon, 03 Oct 2022 07:17:59 GMT
server: AmazonS3
content-encoding: br
date: Fri, 27 Jan 2023 06:40:03 GMT
etag: W/"8c24a5cb4c55b9d6cd3029f5fd2c6fe7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X-JntFRcAcrtCdtcbmvHhXN6uSjmCQTxodS0ZuCZpu1YIeDlQupEEg==
age: 53989
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/main_script.js | 54.230.111.98 | 200 OK | 0 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/main_script.js IP54.230.111.98:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/main_script.js HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=Oiwnymq8yV66ojld3iJ1D2R-BuzK4lNPxxb9XQh3nh8ghforvTmHWwcMyaDmqn1xWtmjx63kUz6MSTk_aG0EPxMsn03p11H92KNltM3mdcbLKaW1rUXjdnCKx5vHaNxXbZEMAV4a9_U0JkDXbEiQfCd9Nihh_VbVwkWeNzhf7DKTTvf7Nb9z-E205AFo0U3p6mvJNR1WjqdCSYmDVVJa-t293JDT1_QY7GjiZzxAqKNdV-mPNrZN832NocfUKQ-HSPu1AjTwDgUnHmFVbLSlWMXXgbEq2oncxHTvzjavEm_vCuJbV96KbPo4iqgWkhQlwoUeVvoys4f-LT2vFvxNRwCJ_GTOzBdHhEiDIX7FHiFLCh_iUj0zfPZ5FYYx6zHX&lptoken=166574ec85a5735b9036
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 07:17:53 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 26 Jan 2023 23:51:36 GMT
etag: W/"dc9a27d01c1e53204a61a4a78b5bec2a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sY_8_8dYOEumcLXvWHnGFw-U-aOcLcE766pIo-MUXRAyZW8BDtsfXA==
age: 78496
X-Firefox-Spdy: h2
|
|