r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cf14baed0842431a08367ed54f2346ca
d943be8835b7e4470e3d6fbe09ac39c5464be434
a45fbc8cdddc9f43c0c3c7d73cbb2cdf3cf4c4cd2df20802925b795da5048aa4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4"
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11545
Expires: Mon, 06 Mar 2023 08:42:50 GMT
Date: Mon, 06 Mar 2023 05:30:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash edf4102b9efce8261382541ecd721da5
23a30610ea113c9f93b0ce302ce3df010bd56f05
88c132ab9697f01e979e74208e0ae12ec410c26b7a79f0cead4f9c8f86d12fda
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88C132AB9697F01E979E74208E0AE12EC410C26B7A79F0CEAD4F9C8F86D12FDA"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10970
Expires: Mon, 06 Mar 2023 08:33:15 GMT
Date: Mon, 06 Mar 2023 05:30:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Retry-After, Backoff, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Mar 2023 05:08:34 GMT
content-type: application/json
age: 1311
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6681493f94022a7df736f92e03badd12
31bc327734b19fbf70290dcc2d19222564a3a396
f9fe24479b86404d7884409068517cc6f57b988b35be92e4f58cb4634fcb2218
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F9FE24479B86404D7884409068517CC6F57B988B35BE92E4F58CB4634FCB2218"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2544
Expires: Mon, 06 Mar 2023 06:12:49 GMT
Date: Mon, 06 Mar 2023 05:30:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 96QIPNxR0umqussNoTIX81zTKnexTKZuIxt2TVRg1GCgKMt8Ka4wm0v3RCN26XCVYDuazRTd4qM=
x-amz-request-id: K6STJ08FVWQNJDY5
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Mar 2023 05:17:01 GMT
age: 804
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:25 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
45.76.148.82301 Moved Permanently 968 B URL HTTP/1.1 62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
IP 45.76.148.82:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (635)
Hash 0b483ac1b6863fbee9675439379abc6b
74b76e11770fd22435b89c8ab0bb24000434891b
f6d565264d813105dcd9a4e2cf6bc6901bb48563952e39b3a9c03422c5893790
GET /eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 06 Mar 2023 05:30:25 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 968
Connection: keep-alive
Location: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Last-Modified, Retry-After, Expires, Pragma, Content-Length, Cache-Control, Alert, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Mar 2023 05:12:30 GMT
age: 1076
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1dfdbbe528416d7653788c31a945540d
ce7e4b0cc913dcf90dcb43ca51706e2ff0677eaf
872f2081ef126a0358e196338a21f095c376652feaa7cb9b2bfd6f3149838f60
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "872F2081EF126A0358E196338A21F095C376652FEAA7CB9B2BFD6F3149838F60"
Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19221
Expires: Mon, 06 Mar 2023 10:50:47 GMT
Date: Mon, 06 Mar 2023 05:30:26 GMT
Connection: keep-alive
push.services.mozilla.com/
52.41.153.123101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.153.123:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: F4PdC6LHWwm6mqILs0Ok+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: h9E3WuaMIjgV00Z8kUVEV/XZ144=
62.winprizes662.monster/eng/img/landers/prizewheel-fb/notification.png
45.76.148.82200 OK 449 B URL HTTP/2 62.winprizes662.monster/eng/img/landers/prizewheel-fb/notification.png
IP 45.76.148.82:0
File type PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data
Hash bd5203f2cc9e7a9125e4575e029541b0
9fa565ab2f4b55da4735b79e529562252b3c9afe
db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f
GET /eng/img/landers/prizewheel-fb/notification.png HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: image/png
content-length: 449
last-modified: Fri, 09 Dec 2022 04:54:16 GMT
etag: "1c1-5ef5df21a6a60"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 277b1a299fdf18ab2c03c45637b49c9d
e028f8b4c1397765963fb6ec0d749dfd6b7d6bb4
a2d16d472f1362b205d93db8fcd1707ea6f0346dce5324dffb0d6a88122d4c65
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2D16D472F1362B205D93DB8FCD1707EA6F0346DCE5324DFFB0D6A88122D4C65"
Last-Modified: Sun, 05 Mar 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6356
Expires: Mon, 06 Mar 2023 07:16:23 GMT
Date: Mon, 06 Mar 2023 05:30:27 GMT
Connection: keep-alive
62.winprizes662.monster/eng/img/landers/prizewheel-fb/prizewheel_spinner.jpg
45.76.148.82200 OK 32 kB URL HTTP/2 62.winprizes662.monster/eng/img/landers/prizewheel-fb/prizewheel_spinner.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3\012- data
Hash d4655cba21d806e849eed4e4119fbe1a
6453039d85005643e9d65074ca022f63b5d47cdd
90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7
GET /eng/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: image/jpeg
content-length: 32496
last-modified: Fri, 09 Dec 2022 04:54:16 GMT
etag: "7ef0-5ef5df2207542"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444
45.76.148.82200 OK 955 B URL HTTP/2 62.winprizes662.monster/eng/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444
IP 45.76.148.82:0
File type ASCII text, with very long lines (3495), with no line terminators
Hash e8a5c3cb09fa004cd675d2624aa99d8d
84f25e5943c902d15d1b51f6d9038f79d551e624
fd0986fe3e17c48aced3030a9314dd0c71d921ad43f7517243dd06e15497fa4f
Analyzer Verdict Alert fortinet Phishing
GET /eng/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 09 Dec 2022 04:54:15 GMT
etag: W/"da7-5ef5df20b475c"
content-encoding: br
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/prizes/iphone-12-pro-max/default@0.5x.png
45.76.148.82200 OK 36 kB URL HTTP/2 62.winprizes662.monster/eng/img/prizes/iphone-12-pro-max/default@0.5x.png
IP 45.76.148.82:0
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 3425f87a8def62d878b3fbf8f930dee2
961688eb1d3c97e9ed61199b0fcd32e60d1d3467
7f9f5fb4a3340704664a8adba3c74c63d425c92999aed97e078bc3b87d06b64d
GET /eng/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: image/png
content-length: 35519
last-modified: Fri, 09 Dec 2022 04:54:19 GMT
etag: "8abf-5ef5df24429ed"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/landers/prizewheel-fb/loader.gif
45.76.148.82200 OK 5.1 kB URL HTTP/2 62.winprizes662.monster/eng/img/landers/prizewheel-fb/loader.gif
IP 45.76.148.82:0
File type GIF image data, version 89a, 50 x 50\012- data
Hash ed786659a534e0d183c09a90c50abc9d
a6c3d90bfaa86a7cda490bc5d04c8939c31a414e
cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97
GET /eng/img/landers/prizewheel-fb/loader.gif HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: image/gif
content-length: 5083
last-modified: Fri, 09 Dec 2022 04:54:16 GMT
etag: "13db-5ef5df21aa8e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2349
Expires: Mon, 06 Mar 2023 06:09:37 GMT
Date: Mon, 06 Mar 2023 05:30:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2349
Expires: Mon, 06 Mar 2023 06:09:37 GMT
Date: Mon, 06 Mar 2023 05:30:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2349
Expires: Mon, 06 Mar 2023 06:09:37 GMT
Date: Mon, 06 Mar 2023 05:30:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2349
Expires: Mon, 06 Mar 2023 06:09:37 GMT
Date: Mon, 06 Mar 2023 05:30:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 798f3637325523bddef4e627e66b0bb1
f3258713f39d4e7448590dee010917ed14320ec4
e5805f2922506bd022a7fe734d1022156241e88653ea5d16d5a698ac7067828b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5805F2922506BD022A7FE734D1022156241E88653EA5D16D5A698AC7067828B"
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2349
Expires: Mon, 06 Mar 2023 06:09:37 GMT
Date: Mon, 06 Mar 2023 05:30:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdccd2ce9-584e-47ab-93bf-abf8287b821e.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdccd2ce9-584e-47ab-93bf-abf8287b821e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 69536c57b14c2419255e2386dd07e825
dbae31696a00f5f6c8495de0983ff8a08e77f970
7e09f086bc5f848e3ff503a2ab61392a57a0149af47f20415e5adeb2408e02e5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdccd2ce9-584e-47ab-93bf-abf8287b821e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8161
x-amzn-requestid: c9201eea-8216-4a14-803c-b947465f327c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6k1GA4oAMFpkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050aeb-4c2595df7964fd650a9de81f;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: CT8akW7CBkdgv11ADLeS94gm5CmU6zqTJ5DIDcOb7xi1fJp-xVffhA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 ac463f3377446e4c603deca30feb744a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 22:45:52 GMT
age: 24276
etag: "dbae31696a00f5f6c8495de0983ff8a08e77f970"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc177c1b3-daca-4be8-99da-53657685afd6.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc177c1b3-daca-4be8-99da-53657685afd6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea9df494dd71d0c0b0dd8b3725cd44d3
40869d1be51f481e28ec7d5a3803e9e62d63654f
301e65467df484430c3aaf58897844f810cbfda4a54f89ff2acf7a2e30cb91c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc177c1b3-daca-4be8-99da-53657685afd6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7397
x-amzn-requestid: a8465d94-2ade-4074-8061-8f13611b5cbe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BPoqSGCZIAMF4gQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6402ee41-698958c25fed7fac78ab18a5;Sampled=0
x-amzn-remapped-date: Sat, 04 Mar 2023 07:07:45 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: _hT5dDyUxqvyhoLWyyBh4ZTCPg3qcnT9nRc5CA0CGZuO-hingMDnfQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Mar 2023 01:44:08 GMT
age: 13580
etag: "40869d1be51f481e28ec7d5a3803e9e62d63654f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc4fc791-0fcf-48b3-a3fa-00548c2bff9f.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc4fc791-0fcf-48b3-a3fa-00548c2bff9f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bc38d40f9431067b1de69da19834da17
b9a46b3bde27762b1e71ee871126daf531477c3a
ddaddeb8804444883556d93c2c94899ac8543f9b27017a4a62ab7edc98c99656
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc4fc791-0fcf-48b3-a3fa-00548c2bff9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6740
x-amzn-requestid: 4326e8fa-b85a-4fd8-ab47-c989e968f4c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6RjESxIAMFyKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050a70-18a08cb93f89f1de252c04c2;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:32:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 1lXte9I2bdA2FiX-DuK5aHDeRQoBwUxUm0d2hm-6brHG1LxBp-Fkdw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6af3b573d8970d5db2a4d03354335b84.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:54:21 GMT
age: 27367
etag: "b9a46b3bde27762b1e71ee871126daf531477c3a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7c2629-88f9-4777-8c3c-14823e639561.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7c2629-88f9-4777-8c3c-14823e639561.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a1ce501327ab258204200a8e3bb733eb
2ef1f390964884ca88df9a497cc632cbb4c23855
84387da5bff97cddf26ca1628d2c69fb32788b8d29ff81a7980d914fb01b2daf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7c2629-88f9-4777-8c3c-14823e639561.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10289
x-amzn-requestid: 3b44d440-b211-4814-bd52-01ee571c020c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU7KvEoaoAMF9Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050bde-331469ae5532332d104a8cdb;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:38:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 54GEgQNbvUfktYhEnOTyUSOjQbHxhD8oXSg6gx3KXZ3sUoSPd1qkHQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 74ab105148338444981d1b2277ffd9c4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:56:32 GMT
age: 27236
etag: "2ef1f390964884ca88df9a497cc632cbb4c23855"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
34.120.237.76200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4726917eabc29a977873ad26e264e70d
4619a0418ee08d6618ead537f31823c98f355b5a
d3c6b43d46ccff30f0003a063b6c4c78d4a782262bfdeb138e6c015555ce2dcb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0c3b178-ee57-465b-aa8c-fb6f93e35cab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3381
x-amzn-requestid: 8b89e7ab-b8b3-45cd-af3a-cc419e61f1fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A-PNPFynoAMFn8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fbf8ba-616bedc230d1c2b13a09beae;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 00:26:34 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 20gfRWuEZKeWijeUdUr10sCx8uqri-zpK-KTXBJrZaQOm3V1Gk8KQw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 0ec9ddba08fcd99386924593dbdbd44a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 11:26:52 GMT
age: 65016
etag: "4619a0418ee08d6618ead537f31823c98f355b5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 49dbeca46074e859a5a2958fdec9b28b
c649916591826b4db490b98cbe530533818daf0d
cb33caa142deb6570ce9e8a382d7fce45ba0101cdbc65ee6319dd23693f22086
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd016e3e-cec7-484b-8151-f72ea54dc958.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7250
x-amzn-requestid: 5ae814e4-592b-4811-a724-d807b69ebd2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BU6hUHslIAMF26w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64050ad4-051cb0632863689209d81d45;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 21:34:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: zlrwir3_2rfYf_Sr-2fQok_Sm2sLNVZfELD1DR3vdFL3avdVcsXJ4Q==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 f3ac324bf05099849ebda59e8136db0e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Mar 2023 21:56:28 GMT
age: 27240
etag: "c649916591826b4db490b98cbe530533818daf0d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/landers/prizewheel-fb/prizewheel_static.png
45.76.148.82200 OK 3.4 kB URL HTTP/2 62.winprizes662.monster/eng/img/landers/prizewheel-fb/prizewheel_static.png
IP 45.76.148.82:0
File type PNG image data, 1002 x 1002, 4-bit colormap, non-interlaced\012- data
Hash dc484e0043b5ff6191b1880c8779863c
a5b67e3dff3dea3940eed090431aecbb36611b1d
30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6
GET /eng/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/png
content-length: 3370
last-modified: Fri, 09 Dec 2022 04:54:16 GMT
etag: "d2a-5ef5df2204662"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/profiles/african/female/3@0.25x.jpg
45.76.148.82200 OK 2.7 kB URL HTTP/2 62.winprizes662.monster/eng/img/profiles/african/female/3@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 2790f79b7e764407ae4b87a9dc30734b
30f0a1e4d30ac25108f2d0487f49944fbe630b72
8970ba9af5b39727ac25d42ab540c42ae7f58de4011fadb8efd2f5f317a8d575
GET /eng/img/profiles/african/female/3@0.25x.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/jpeg
content-length: 2727
last-modified: Fri, 09 Dec 2022 04:54:22 GMT
etag: "aa7-5ef5df273c57c"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/profiles/african/male/3@0.25x.jpg
45.76.148.82200 OK 2.5 kB URL HTTP/2 62.winprizes662.monster/eng/img/profiles/african/male/3@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 2c188d082f97b0a5b29c92dbaf7a9787
f2a3828b68ba4d06d450832a977c48a22360d5eb
afc758b894177d4003b5d02d80cd023429c99cfc3cd880804570d237cf6a96f0
GET /eng/img/profiles/african/male/3@0.25x.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/jpeg
content-length: 2518
last-modified: Fri, 09 Dec 2022 04:54:24 GMT
etag: "9d6-5ef5df2991068"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/profiles/african/male/10@0.25x.jpg
45.76.148.82200 OK 2.3 kB URL HTTP/2 62.winprizes662.monster/eng/img/profiles/african/male/10@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 2ec37a714ba9202b2492cc1eff504041
29d005604784110044c80c13610ec1fe946a7d83
278b0f8b52650d39e549fc69ea49d62d3bdd0c41b3ffd939da265842b6e40369
GET /eng/img/profiles/african/male/10@0.25x.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/jpeg
content-length: 2302
last-modified: Fri, 09 Dec 2022 04:54:24 GMT
etag: "8fe-5ef5df2939226"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/profiles/african/female/6@0.25x.jpg
45.76.148.82200 OK 2.8 kB URL HTTP/2 62.winprizes662.monster/eng/img/profiles/african/female/6@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash af242991b9a56424739c63a6bd4090a7
7b41b3b2cfbbe69a865efa8863883bf029738b6e
c53bda952fa4ca1869dfb4fd7db948ef87f1a8c8f2e6633e2320465f01f0829f
GET /eng/img/profiles/african/female/6@0.25x.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/jpeg
content-length: 2766
last-modified: Fri, 09 Dec 2022 04:54:22 GMT
etag: "ace-5ef5df279c0be"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/profiles/african/male/9@0.25x.jpg
45.76.148.82200 OK 3.1 kB URL HTTP/2 62.winprizes662.monster/eng/img/profiles/african/male/9@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 4c30d4f61201b822adcfa58dbe32389c
9d9edd23a3b074135d9e043b5d1e52d8dbe29c91
19d491c137daf159170ed6d6340c33b11806347b18b2e89840989b914346d9f4
GET /eng/img/profiles/african/male/9@0.25x.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/jpeg
content-length: 3146
last-modified: Fri, 09 Dec 2022 04:54:24 GMT
etag: "c4a-5ef5df29900c8"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
45.76.148.82200 OK 26 kB URL HTTP/2 62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
IP 45.76.148.82:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1005)
Hash a0f130954aa7f1f4614220ab375bbf40
5ec35f376f1caed7b1d9b175031543769ae51080
4ee6580cc7bf5914426edf89563c8053dd696da36979b2cc1d7d46698c62f9f1
GET /eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:26 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Fri, 09 Dec 2022 05:06:04 GMT
etag: W/"3059-5ef5e1c4b21d1"
content-encoding: br
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/profiles/african/female/5@0.25x.jpg
45.76.148.82200 OK 2.0 kB URL HTTP/2 62.winprizes662.monster/eng/img/profiles/african/female/5@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 732da0e5f3968ec3d9014a6bbb62c04a
5d306c8778fdcac19f03542fccaf31df1cb8a783
d3eefd5709b25e1bb1129cccb1da22e54816cb2d15a2ed4cfa045b57579a7ef8
GET /eng/img/profiles/african/female/5@0.25x.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/jpeg
content-length: 1960
last-modified: Fri, 09 Dec 2022 04:54:22 GMT
etag: "7a8-5ef5df2780b3e"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/profiles/african/female/1@0.25x.jpg
45.76.148.82200 OK 2.8 kB URL HTTP/2 62.winprizes662.monster/eng/img/profiles/african/female/1@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 9ef452251daa9ff9fbdc5fe827a35061
2cb40a02efce5fd8772f57b8e9737018fed3f9ba
355126576c7a0bdbbe771a2b039d093c855efe6805941a36456324a2076e2ce1
GET /eng/img/profiles/african/female/1@0.25x.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/jpeg
content-length: 2781
last-modified: Fri, 09 Dec 2022 04:54:22 GMT
etag: "add-5ef5df2728cfc"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/profiles/african/male/2@0.25x.jpg
45.76.148.82200 OK 2.1 kB URL HTTP/2 62.winprizes662.monster/eng/img/profiles/african/male/2@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 0f15632c24d4646c58f30feaa3baaa8a
a7f319366432f5a63d7f11d30b0a6c9cb6398b64
4118d09fb21a7f34160f470078f6dcba042e8a07e2b4e32de12a4dcd9c5e7da8
GET /eng/img/profiles/african/male/2@0.25x.jpg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/jpeg
content-length: 2053
last-modified: Fri, 09 Dec 2022 04:54:24 GMT
etag: "805-5ef5df2933466"
accept-ranges: bytes
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/img/fb-like.svg
45.76.148.82200 OK 0 B URL HTTP/2 62.winprizes662.monster/eng/img/fb-like.svg
IP 45.76.148.82:0
Analyzer Verdict Alert fortinet Phishing
GET /eng/img/fb-like.svg HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:28 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 09 Dec 2022 04:54:12 GMT
etag: W/"1213-5ef5df1e281cf"
content-encoding: br
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/css/app.css?id=c588c17324f2be0e0ec9
45.76.148.82200 OK 0 B URL HTTP/2 62.winprizes662.monster/eng/css/app.css?id=c588c17324f2be0e0ec9
IP 45.76.148.82:0
Analyzer Verdict Alert fortinet Phishing
GET /eng/css/app.css?id=c588c17324f2be0e0ec9 HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 09 Dec 2022 04:54:12 GMT
etag: W/"21-5ef5df1dcc50d"
content-encoding: br
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/js/app.js?id=0601d5f2aaa1656cef1f
45.76.148.82200 OK 0 B URL HTTP/2 62.winprizes662.monster/eng/js/app.js?id=0601d5f2aaa1656cef1f
IP 45.76.148.82:0
Analyzer Verdict Alert fortinet Phishing
GET /eng/js/app.js?id=0601d5f2aaa1656cef1f HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 09 Dec 2022 04:54:13 GMT
etag: W/"3d1-5ef5df1f51f75"
content-encoding: br
X-Firefox-Spdy: h2
62.winprizes662.monster/eng/js/landers/prizewheel-fb/app.js?id=da05cdf35760d77e97e5
45.76.148.82200 OK 0 B URL HTTP/2 62.winprizes662.monster/eng/js/landers/prizewheel-fb/app.js?id=da05cdf35760d77e97e5
IP 45.76.148.82:0
GET /eng/js/landers/prizewheel-fb/app.js?id=da05cdf35760d77e97e5 HTTP/1.1
Host: 62.winprizes662.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/eng/phengnotix4.html?city=Mountain%20View&model=Android%2010.0&brand=Generic&cep=UgEw4mW_g_CmhBmzhoDX6mkpbQOdRvFUs6jO9abQZpLmAUxb88M4oWzS2wNuVS6w_qFYyWP73UDQBKHmlCPhegewRtt0aMGmiMKVVyvwryk2E4o8azxAK2OOs-lHqsjsCXAtaXDlb_ujqpbqJywW2t8ondr1aBQ2_AecoeKu3ezNYJFKqpFbJtpNh1XRvpeSwHMsWlW7vKBfmaeBF-bevBqjW_6xEvyg5adPTWQfxWqfxmk9ZmSK5k3wEHyaJTGa7PfeceN2JdlHFCiXFR7Xvo8UHeW64JQfoB_DzF9wTsuDZE8j1BIVqIDnkBtRhZnqtoUQAx-hh9qAwKgyJ45qvWhffMyY6bL2AZKIMC5Qh6bMhCUVtNG29CcwOJWzaURo88NsRC2ID_GiBp4PEDeIxXiNTdIRBqw8USoTLi8_Y24&lptoken=165f77af85750042672b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 09 Dec 2022 04:54:21 GMT
etag: W/"24ab5-5ef5df26a4f99"
content-encoding: br
X-Firefox-Spdy: h2
bigrourg.net/pfe/current/micro.tag.min.js?z=5585510&sw=/sw-check-permissions-11bc7.js
139.45.197.251200 OK 0 B URL HTTP/2 bigrourg.net/pfe/current/micro.tag.min.js?z=5585510&sw=/sw-check-permissions-11bc7.js
IP 139.45.197.251:0
GET /pfe/current/micro.tag.min.js?z=5585510&sw=/sw-check-permissions-11bc7.js HTTP/1.1
Host: bigrourg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://62.winprizes662.monster/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Mar 2023 05:30:27 GMT
content-type: application/javascript
last-modified: Mon, 20 Feb 2023 17:09:26 GMT
etag: W/"63f3a946-a115"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2