realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
301 Moved Permanently 178 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
GET /sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:00:59 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2183
Expires: Fri, 25 Nov 2022 12:37:22 GMT
Date: Fri, 25 Nov 2022 12:00:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5281
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:00:59 GMT
Last-Modified: Fri, 25 Nov 2022 10:32:58 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12845
Expires: Fri, 25 Nov 2022 15:35:04 GMT
Date: Fri, 25 Nov 2022 12:00:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 11:19:06 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2513
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: FkcDNhjmGBvklbBVO2Y2ud2rcEpDZ6jTBPh8pXYwtRQqiU/W/L+h3mtXATVSW+TmS/QF89hhpRQ=
x-amz-request-id: BYA5KP3P05QNJWQ7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 11:40:47 GMT
age: 1212
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:00:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d3caa9ea7da7c50a978a4dcba24ad8a
8610534d138de0abc6f9322a335b23dbc5281faf
f8dad104f458552e2466a9461b602fd70a3b250ba0305b4213fb205b0727d1f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F8DAD104F458552E2466A9461B602FD70A3B250BA0305B4213FB205B0727D1F0"
Last-Modified: Thu, 24 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 25 Nov 2022 18:00:59 GMT
Date: Fri, 25 Nov 2022 12:00:59 GMT
Connection: keep-alive
realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
200 OK 3.8 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source, ASCII text
Hash be9fa8cc59d06e3c80c5cdb0fb75159d
0d60d831ccc09cd976c21841db339b1f61f5dbca
12930faaed89edfe7a67b80cc23b262c466e194b2a783f16b4f42253a13235b9
GET /sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:00:59 GMT
Content-Type: text/html
Last-Modified: Tue, 25 Oct 2022 11:50:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6357cd73-46b8"
Content-Encoding: gzip
realtimewin.com/sg/raffle_boxes_bk_ntx/css/6h0fj0l122.css
200 OK 7.8 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/6h0fj0l122.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (7771), with no line terminators
Hash 6e3fd6255cd4b78c2da62e84c1ed7a7f
68ac4757dc2ed808fd29fc628c61ef9ce41039ee
5323e16100f8ee32d11bc2d842895a35f32429f890c9ed5f0bf48d2261b73873
GET /sg/raffle_boxes_bk_ntx/css/6h0fj0l122.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: text/css
Content-Length: 7771
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-1e5b"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/helpers.js
200 OK 2.2 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/helpers.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 328bc403d211866b7fbeeb5a3d48057e
77326f838722cbf346cc7a657ab7a69e391657e8
290969069b2a56f48ae9975daa49685e52f2d44a3977c4d6f2efccf3eceb04ec
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/helpers.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: application/javascript
Content-Length: 2224
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-8b0"
Accept-Ranges: bytes
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:01:00 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669377660.dop002.sk1.t,1669377660.cds261.sk1.hn,1669377660.cds210.sk1.c
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 0bed76d6aa31e1dbe70b5ad119eb31ce
25191b8e3855dc45417736b26b8ab092b3ec0106
7689122475d49c80fb087012cc03f5a641975d35c42e846c3ce01a267d3c32e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2583
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Last-Modified: Fri, 25 Nov 2022 11:17:57 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
realtimewin.com/sg/raffle_boxes_bk_ntx/css/7j3yarnp5h.css
200 OK 395 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/7j3yarnp5h.css
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 3f9401a877cb75e550c646959ecd1343
038fbca8d375d51e01c312f19d18c34b93e17762
fdbeabb5b3aa977fa4416df3852acbf9fadf5755172a059961dc1ba72bb1d345
GET /sg/raffle_boxes_bk_ntx/css/7j3yarnp5h.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: text/css
Content-Length: 395
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-18b"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 280 B IP
Hash 0bed76d6aa31e1dbe70b5ad119eb31ce
25191b8e3855dc45417736b26b8ab092b3ec0106
7689122475d49c80fb087012cc03f5a641975d35c42e846c3ce01a267d3c32e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2583
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Last-Modified: Fri, 25 Nov 2022 11:17:57 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 471 B IP
Hash e62367fb5e0af824dd1d11cd8497b3fe
4760db938f2a518eea468ca7e92a87971e663761
3264556e5fe1bc7885248a574915ee05845659b5f0517e7e2ee740206dd051ad
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5589
Cache-Control: max-age=92338
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Etag: "637f5e5a-1d7"
Expires: Sat, 26 Nov 2022 13:39:58 GMT
Last-Modified: Thu, 24 Nov 2022 12:06:50 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
realtimewin.com/sg/raffle_boxes_bk_ntx/js/visual.js
200 OK 7.3 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/visual.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (564)
Hash e8b75b31218a58574864ba2e377e044b
d6a0668521c72106c46ea0a67483ca57f59bfc7b
d5a419e8a0d4db2912a9a0df5a9a52f06a947775a1ce50e047056f513da96dc0
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/visual.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: application/javascript
Content-Length: 7313
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-1c91"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/config.js
200 OK 1.3 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/config.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash a2c2f37e9858846864a243799c367d50
c3516e0a8a4691dc981ee35db1772e28d41236a2
3f0a01153acb4d045828d89685bfecc3142c8cb615f641e733a5ca56fd6c73ce
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/config.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: application/javascript
Content-Length: 1345
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-541"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/general.js
200 OK 4.7 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/general.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (438)
Hash 543951b88566cc693fd4be7683d0ab7f
8374246b02b8d49c113a3bb33999371900bfc608
ba75e1b970da91a73273e6659468fc8fc89cd1e1c8fbff5ba9d7c012344506b0
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/general.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: application/javascript
Content-Length: 4735
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-127f"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/questions.js
200 OK 5.3 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/questions.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (395)
Hash 9c7f08f0923a57726409d033a9e49469
96b2d3678db2afd0622c069be676732074dadff8
b1a3eace772da9b2cc78947c1d209e4780f6bdd53431afae6ff178cff0c14d6e
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/questions.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: application/javascript
Content-Length: 5251
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-1483"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/css/caixes.css
200 OK 63 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/caixes.css
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 69870e317698e087a6244cd2b01500ee
7094538022349e444aa0219f97d973e602db5696
980ce3f8d7eeeacb8009f84c0e8f29949a3ff024418a599c1233927e29ffee91
GET /sg/raffle_boxes_bk_ntx/css/caixes.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: text/css
Content-Length: 63
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-3f"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/flow.js
200 OK 13 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/flow.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (1562)
Hash 39896c37ecf351b558e3f5f81ff09455
dd269fc8ac86a68496175ff7ce9948f5096b6a39
32956e236351d3d4cfc542eac19cff5f07ba68117ffcee4e1e9b60a8ce531e9d
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/flow.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: application/javascript
Content-Length: 13099
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-332b"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/css/76xzrsbt8n.css
200 OK 3.8 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/76xzrsbt8n.css
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 56591d9cbca8de25b9e8ed95b60d4f61
a3c74f31ce5fe4f0dc50dce291ae00ac3c14a0ff
967c2a487286ccb51d63128dfa97caae1b5dcfe39a22be90702285aed0f906c8
GET /sg/raffle_boxes_bk_ntx/css/76xzrsbt8n.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: text/css
Content-Length: 3757
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-ead"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/css/4pbny7k30a.css
200 OK 1.4 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/4pbny7k30a.css
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 6c9276f3d527ee8da644994a6ce48cca
eb107297ac31f1410aa5ba830d8035ccd2ffa837
c714c752c8a7825f5993e5507190117ccf63ade68d44d455efcdd81c85ac7d48
GET /sg/raffle_boxes_bk_ntx/css/4pbny7k30a.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: text/css
Content-Length: 1397
Last-Modified: Tue, 25 Oct 2022 11:50:11 GMT
Connection: keep-alive
ETag: "6357cd73-575"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 0bed76d6aa31e1dbe70b5ad119eb31ce
25191b8e3855dc45417736b26b8ab092b3ec0106
7689122475d49c80fb087012cc03f5a641975d35c42e846c3ce01a267d3c32e6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2583
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Last-Modified: Fri, 25 Nov 2022 11:17:57 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
realtimewin.com/sg/raffle_boxes_bk_ntx/css/font-awesome.css
200 OK 122 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/font-awesome.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (659)
Size 122 kB (122128 bytes)
Hash a8dd6f550f891acde535b28c1d3fe75f
131430af33a8079c2934875095760a7b2ae71835
6a54d489577cec60935437ee317cd09b989ccafde66f2e9e4d645c64f5f5ba28
GET /sg/raffle_boxes_bk_ntx/css/font-awesome.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: text/css
Content-Length: 122128
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-1dd10"
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=G-4530RD5FPC
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-4530RD5FPC
IP
File type ASCII text, with very long lines (21484)
Hash 0529d5a985fa6e042c1737f1eb657534
89b897312108df5c29a5356c1c589f103bb29029
ff0cd570d7eceae44eb966c649913343a7cf93cbded176aa56896cc952bb78cb
GET /gtag/js?id=G-4530RD5FPC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 12:01:00 GMT
expires: Fri, 25 Nov 2022 12:01:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76623
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 11:08:53 GMT
cache-control: public,max-age=3600
age: 3127
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
realtimewin.com/sg/raffle_boxes_bk_ntx/img/country_flag.png
200 OK 3.6 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img/country_flag.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data
Hash 1be1df62376de14083746ad5b418e272
494d9d47c076c4caab75d2d0306b1b5fd33a29d9
cf5ceeca50ae2cd1946b1305c62691e2ecdd69641d865ec70bc1c6e88a0602ba
GET /sg/raffle_boxes_bk_ntx/img/country_flag.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: image/png
Content-Length: 3598
Last-Modified: Tue, 25 Oct 2022 11:50:15 GMT
Connection: keep-alive
ETag: "6357cd77-e0e"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/img/card_brand.png
200 OK 48 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img/card_brand.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 481 x 353, 8-bit/color RGBA, non-interlaced\012- data
Hash beea815021316526e77831c36326c18c
a4c8c214045abfc940f45b62580b2c458f0758b5
208a9b33bfc1dd3f7d2ba9e1d340057d6f1518685bc282cd42f1d66909b48224
GET /sg/raffle_boxes_bk_ntx/img/card_brand.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: image/png
Content-Length: 47926
Last-Modified: Tue, 25 Oct 2022 11:50:13 GMT
Connection: keep-alive
ETag: "6357cd75-bb36"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c01513dfedee4fe381daa1c2655fb289
a6460d5df479d37e09cdf81c07c3b3679a06c08e
266bf63181a97893058186d05e9f49e0743761e362d616dbdd5cb3479d338940
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "266BF63181A97893058186D05E9F49E0743761E362D616DBDD5CB3479D338940"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11174
Expires: Fri, 25 Nov 2022 15:07:14 GMT
Date: Fri, 25 Nov 2022 12:01:00 GMT
Connection: keep-alive
realtimewin.com/sg/raffle_boxes_bk_ntx/img/background.jpg
200 OK 46 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img/background.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x700, components 3\012- data
Hash b6899a4cdf7be73d8ceb0ba6d48e7035
0f452ffdf4f331e789da5106dd3d487e01037b41
9373d24fad9b2e0f667c51ac314ec586ff419932f2894a709ba0261f9316f6b6
GET /sg/raffle_boxes_bk_ntx/img/background.jpg HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/css/caixes.css
Cookie: _ga_4530RD5FPC=GS1.1.1669377659.1.0.1669377659.0.0.0; _ga=GA1.1.1439693606.1669377660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: image/jpeg
Content-Length: 46309
Last-Modified: Tue, 25 Oct 2022 11:50:13 GMT
Connection: keep-alive
ETag: "6357cd75-b4e5"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/tampa.png
200 OK 9.1 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/tampa.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash 7e414b1b40a8211210577b176e724dde
2bd733b74c391aa965ced473e893b82aa563b387
91a737645b3a5adefb9e5b7def2c54f782605bbfc95c373fd6a80ab4775c56cb
GET /sg/raffle_boxes_bk_ntx/img_caixa/tampa.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Cookie: _ga_4530RD5FPC=GS1.1.1669377659.1.0.1669377659.0.0.0; _ga=GA1.1.1439693606.1669377660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: image/png
Content-Length: 9068
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-236c"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/interior.png
200 OK 768 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/interior.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit colormap, non-interlaced\012- data
Hash af77ae24aaa7aa332958f33f2e254ccc
3bf2a3b03733868dd64288b2d682f617f26d3321
4b1fcfe5b92441547d54a9eae2635fe66a33ca178f0da9d06e4a2daac5d74c89
GET /sg/raffle_boxes_bk_ntx/img_caixa/interior.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Cookie: _ga_4530RD5FPC=GS1.1.1669377659.1.0.1669377659.0.0.0; _ga=GA1.1.1439693606.1669377660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: image/png
Content-Length: 768
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-300"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/conteudo.png
200 OK 9.6 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/conteudo.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash ed01b29debaf65c87d4192dbac6a9674
b37b0ddcbb4d58b00c3128051c8a1636135c9c93
bd56b398c48d4aadb8f4df70e8e3d091e05831e6229f34163d40542b340a13d5
GET /sg/raffle_boxes_bk_ntx/img_caixa/conteudo.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Cookie: _ga_4530RD5FPC=GS1.1.1669377659.1.0.1669377659.0.0.0; _ga=GA1.1.1439693606.1669377660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: image/png
Content-Length: 9633
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-25a1"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/frente.png
200 OK 4.4 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/frente.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash 57d0bad7abeaf9db189630eccfe040b6
2d2d12e59be43514915c535052a00a8b297c3f2c
eb53c312d70309e36e97ab3223904a90808d9636f5a0a93d651fb763a9e75f9a
GET /sg/raffle_boxes_bk_ntx/img_caixa/frente.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Cookie: _ga_4530RD5FPC=GS1.1.1669377659.1.0.1669377659.0.0.0; _ga=GA1.1.1439693606.1669377660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: image/png
Content-Length: 4400
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-1130"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 979
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 12:01:00 GMT
Last-Modified: Fri, 25 Nov 2022 11:44:41 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
realtimewin.com/sg/raffle_boxes_bk_ntx/img/locker.png
200 OK 346 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img/locker.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 21 x 21, 8-bit colormap, non-interlaced\012- data
Hash bbffb119496dd210a5eb7ee0368ac16e
e15889dbb41454983c5725f59f58fbc1b0a8ecc0
97569eec069e174a99e68dcbd64f0398ca7ae5deeabcde06948d170420d2d6cd
GET /sg/raffle_boxes_bk_ntx/img/locker.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Cookie: _ga_4530RD5FPC=GS1.1.1669377659.1.0.1669377659.0.0.0; _ga=GA1.1.1439693606.1669377660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:00 GMT
Content-Type: image/png
Content-Length: 346
Last-Modified: Tue, 25 Oct 2022 11:50:15 GMT
Connection: keep-alive
ETag: "6357cd77-15a"
Accept-Ranges: bytes
notix.io/event
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
notix.io/event
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
notix.io/event
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
notix.io/event
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
notix.io/event
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 63
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 76
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 85
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1191
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CLQUBayKE+PR7X05WjM0bw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xJe0i0eSw4n3am8TCrV1OK0Y3XY=
region1.google-analytics.com/g/collect?v=2&tid=G-4530RD5FPC>m=2oeb90&_p=1585704547&cid=1439693606.1669377660&ul=en-us&sr=1280x1024&_s=1&sid=1669377659&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fsg%2Fraffle_boxes_bk_ntx%2F%3Fcep%3DHeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u%26lptoken%3D16f569da371f9492460d&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-4530RD5FPC>m=2oeb90&_p=1585704547&cid=1439693606.1669377660&ul=en-us&sr=1280x1024&_s=1&sid=1669377659&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fsg%2Fraffle_boxes_bk_ntx%2F%3Fcep%3DHeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u%26lptoken%3D16f569da371f9492460d&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-4530RD5FPC>m=2oeb90&_p=1585704547&cid=1439693606.1669377660&ul=en-us&sr=1280x1024&_s=1&sid=1669377659&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fsg%2Fraffle_boxes_bk_ntx%2F%3Fcep%3DHeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u%26lptoken%3D16f569da371f9492460d&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://realtimewin.com
date: Fri, 25 Nov 2022 12:01:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/caixa.png
200 OK 9.7 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/caixa.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash a76821e94d179b634c5bd130dd74d9d2
4773b169be6d89451e13679356bae81401a38c97
69f4a59b04322e88260da4eaa5cf079fbabef9539b3fb923c373f21b7f36f125
GET /sg/raffle_boxes_bk_ntx/img_caixa/caixa.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/?cep=HeNXvPGGqQFW7jvNjJ1PFl4CMabLnMQR-aaaZ3SYyxxoj0GPcmc3edrygNHDfMCnFGTwyjnM5RDHbBqtt-a9i1s9r3e81NaDfUlzTL8qWnTqm9_GVzPfk9y5Kd5CE7r4D5xzCaNdYOixtX7ou5rPep1rPdarb4hbfW9zXVxCbeNlKeP3NKFZBEw_c1e8HSjTb8F5h7PrJRpMFjE1kuBeBo0QDvKPLDODIdcmM1zAZ-YjEiHsNLVuJuEiBMcwhd2is2tbM00ilVfwcK5RMSCn7VH25p9AYzB8360igY5GCUnAt5ly8m57V8sAKnB_LpY5YF9HdeplR9osg1H8HDxz1WojhCDYhXXds3dZ9sNc-FUsaDN-y1DfdRNcYSZUcW2u&lptoken=16f569da371f9492460d
Cookie: _ga_4530RD5FPC=GS1.1.1669377659.1.0.1669377659.0.0.0; _ga=GA1.1.1439693606.1669377660
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 25 Nov 2022 12:01:01 GMT
Content-Type: image/png
Content-Length: 9667
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-25c3"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10258
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 12:01:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10258
Expires: Fri, 25 Nov 2022 14:52:00 GMT
Date: Fri, 25 Nov 2022 12:01:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 04:23:00 GMT
age: 27482
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
kit.fontawesome.com/7deea0368b.js
200 OK 17 kB URL HTTP/2 kit.fontawesome.com/7deea0368b.js
IP
Hash 9635748c1bc9480faf00970c5cb6e04f
943d5afd94a0ab628f3f4f0ba4cb8eeeba5d4347
4d94b6c94d286dc369e64480a72efaec2341a4667901dd8f24721c02dd24bf58
GET /7deea0368b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyeOi5eUWKFumrWJ9_tB
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 76fa3a27df42b4ed-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb94ecb5881a7e49d964e4287d11e7a4
4b131a189db1b615e2519a28cad83d78297ab67f
f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kkI9Vh2vZeJPwz2JVL5MErsBBwk8-2Jo49yc0sFqv5pxIyBi6azFIw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:00:34 GMT
age: 50428
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b6ee13d43732f7c764a49500d092865
5d15fd672e968d59b541e4d5d0d01cd5e69f4075
fc3623d527147e1c6aab399251ed8d527e6eefdee6ad7183f00df2613498bfe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00e89fb5-5cb3-4f68-936b-5ee31d6061bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8006
x-amzn-requestid: 78aab013-df11-464b-a1c7-ee41b7e77b40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-AHSrIAMFvKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38c-4d795f410a57fc2c21d7075d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NntLZ3wUdcX9kEo-afFLU0TPKgqAlSK3bToNh2mmoqoyLBJINNk7ow==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:54:39 GMT
age: 50783
etag: "5d15fd672e968d59b541e4d5d0d01cd5e69f4075"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 8f679d7f-2ea5-4e47-b78d-79af59435a62
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFPHYHkAIAMFpBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec562-26108a785e910dc3355d58f1;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:14:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NKwpIdw2RZNZNh69AF5GNvunA_QfRGClvzcRP3zYwn7c8BLBlt097g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:46:20 GMT
age: 15282
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f6292a2988fb4505d0098553b8e99ddc
9b8aafcda0e22edcc16d3048f4b88659d3b42419
16b7b473229c5e519ab81b385c50277424f3f3b2a5d7647035e84ba58e44f3be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9e23502-5ace-42f4-a990-42412dc7e04e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6385
x-amzn-requestid: 4c2a84f7-f038-4f5a-86c2-5c8ce1a48c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cI5NVFMAoAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803bee-45c6411c2430e2375f530dd8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:52:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fj82i9qJmEiUy2DOkkowq8WRyzupMwNyQqu110sJ3o72HEW4yb7bjQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 07:35:26 GMT
age: 15936
etag: "9b8aafcda0e22edcc16d3048f4b88659d3b42419"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:47:53 GMT
age: 51189
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
IP
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ef16cf332760e013a5fd2d10ab2b11ec.cloudfront.net (CloudFront)
x-amz-cf-pop: CDG52-P2
x-amz-cf-id: rmU6pEK5n9nldWNNqnPM_Cyq6uS0Z9SujK14MnCfzjimKvMd_ICuzQ==
age: 3362602
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x87cCujIQe2L2xW69q8ZPKdtusLG7PXQ0XeygZxqFhwvDcPQv0cuNG3iQh4bLLQ%2BsSllh9%2BBsJlfshbwTRyYCT8D%2B9LABf%2FWqEdaCwEDB4joLX6sQ7LFhnqV0%2FIHXBsRK8Haudqo6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa3a2a4bd974b9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
IP
GET /bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7fd2f04e75bd7ab1a79d80cdd4c33085"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 11/15/2022 10:39:27
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1054
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 919ecc8be24f8b090981338a1e0632d7
cdn-cache: HIT
cf-cache-status: HIT
age: 51660
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76fa3a27bb71b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 08/20/2022 02:33:27
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 2d68a6f1c0c74cd757bd2622dd23138d
cdn-cache: HIT
cf-cache-status: HIT
age: 51660
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76fa3a27db91b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
notix.io/ent/current/enot.min.js
200 OK 0 B URL HTTP/2 notix.io/ent/current/enot.min.js
IP
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 12:00:59 GMT
content-type: application/javascript
last-modified: Mon, 21 Nov 2022 10:07:37 GMT
etag: W/"637b4de9-126a5"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
IP
GET /css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Nov 2022 12:01:00 GMT
date: Fri, 25 Nov 2022 12:01:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
IP
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 12:01:00 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 adb83a3a3628f104e6d1d9d74c07d92c.cloudfront.net (CloudFront)
x-amz-cf-pop: CDG52-P2
x-amz-cf-id: 8prxDGju7pMqd60v1ExCl7uvQ2OeO_h-VJHXTgKQmk8cz-ovgaU9Lw==
age: 3362602
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GZIwE6vOWLP3USkBq%2FWZ3Lxbaflcer%2BN%2BTds9LCbKfETwJ1NH6nLy7J%2BdbR8b0TJWVVpsJgP6vHij0eKmAVodirpE9Hr318A7ClPtnWyPDkMFormfj%2FWgJup2D5yZR7jJzq1Wi1Lqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fa3a2a5be574b9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
46.101.99.16
34.102.187.140
23.36.77.32
93.184.220.29
104.18.10.207