r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7866
Expires: Thu, 27 Oct 2022 07:08:19 GMT
Date: Thu, 27 Oct 2022 04:57:13 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5787
Cache-Control: max-age=108616
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 04:57:13 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 11:07:29 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2842
Cache-Control: max-age=105671
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 04:57:13 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 10:18:24 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a39eea1096852891690eaee02a64383e
c273000f799fc3676e8e3ef3617611a31252cffc
d9d95319013d64bc2ef6d9870f4adba902ee970b6f9e96279c9ed86f556e0001
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9D95319013D64BC2EF6D9870F4ADBA902EE970B6F9E96279C9ED86F556E0001"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15869
Expires: Thu, 27 Oct 2022 09:21:42 GMT
Date: Thu, 27 Oct 2022 04:57:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: UQEeScNeWUcHpz4dImtQ/GFlH5SWvDjzz/dKNJ2u6su0sNQozWqGeADMIzgcbDelxUH3XgNn86E=
x-amz-request-id: 49M4A97VT7TJWRCX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 27 Oct 2022 04:09:40 GMT
age: 2853
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 27 Oct 2022 04:57:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
24.winprizes524.digital/idpp2/idppnotix22.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=svBpQ_EwqH8Ryilm16qgZ8f36BNos0XXNgx8axM64--L16BBxTAAQUQOwXsAjo957fbG0U8R6mzfCB2KMj6sSIEPNYR5g0-vyAPX36XCyD10hTnnEAq0YfHfpCsO-6uBqEs7nZRwoHa_ZfUAVpj9GEFVrH1v2Qy5n2mvmZFxFloMMhexyG1BzU2ZWma5OTLqk8GizZuaB7MUWLTZoVbemX0nz45NmHhB0cvq2c4i_g6zwROkZdR9B2bKPx9f6KCQWeoT2X1QxVmkujyUzAqbvOAfSzV1w8J88kINunB8sM8CzdsPcPuHnSzZl9kRik60JnE75t7p3muTub73yJtxv2rt4CwqI3OoR8lKFlS6P06N7-7tt9Km4k8kUWYS7z1ip_FBiEuJHHFQVQhk-KuNIybMwh_b_HetA1frAXEa8Gk&lptoken=167666f484fe845d1432
301 Moved Permanently 964 B URL HTTP/1.1 24.winprizes524.digital/idpp2/idppnotix22.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=svBpQ_EwqH8Ryilm16qgZ8f36BNos0XXNgx8axM64--L16BBxTAAQUQOwXsAjo957fbG0U8R6mzfCB2KMj6sSIEPNYR5g0-vyAPX36XCyD10hTnnEAq0YfHfpCsO-6uBqEs7nZRwoHa_ZfUAVpj9GEFVrH1v2Qy5n2mvmZFxFloMMhexyG1BzU2ZWma5OTLqk8GizZuaB7MUWLTZoVbemX0nz45NmHhB0cvq2c4i_g6zwROkZdR9B2bKPx9f6KCQWeoT2X1QxVmkujyUzAqbvOAfSzV1w8J88kINunB8sM8CzdsPcPuHnSzZl9kRik60JnE75t7p3muTub73yJtxv2rt4CwqI3OoR8lKFlS6P06N7-7tt9Km4k8kUWYS7z1ip_FBiEuJHHFQVQhk-KuNIybMwh_b_HetA1frAXEa8Gk&lptoken=167666f484fe845d1432
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (631)
Hash 86c673e3db272a27e67f189335bc904d
18cebddc841f1a02bf56dc6e5f3fd26a326c1459
7579eb81e7bf53b1877d7884dcd46bfcd244ec968cf839ed39114422d230ae35
GET /idpp2/idppnotix22.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=svBpQ_EwqH8Ryilm16qgZ8f36BNos0XXNgx8axM64--L16BBxTAAQUQOwXsAjo957fbG0U8R6mzfCB2KMj6sSIEPNYR5g0-vyAPX36XCyD10hTnnEAq0YfHfpCsO-6uBqEs7nZRwoHa_ZfUAVpj9GEFVrH1v2Qy5n2mvmZFxFloMMhexyG1BzU2ZWma5OTLqk8GizZuaB7MUWLTZoVbemX0nz45NmHhB0cvq2c4i_g6zwROkZdR9B2bKPx9f6KCQWeoT2X1QxVmkujyUzAqbvOAfSzV1w8J88kINunB8sM8CzdsPcPuHnSzZl9kRik60JnE75t7p3muTub73yJtxv2rt4CwqI3OoR8lKFlS6P06N7-7tt9Km4k8kUWYS7z1ip_FBiEuJHHFQVQhk-KuNIybMwh_b_HetA1frAXEa8Gk&lptoken=167666f484fe845d1432 HTTP/1.1
Host: 24.winprizes524.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 27 Oct 2022 04:57:13 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 964
Connection: keep-alive
Location: https://24.winprizes524.digital/idpp2/idppnotix22.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=svBpQ_EwqH8Ryilm16qgZ8f36BNos0XXNgx8axM64--L16BBxTAAQUQOwXsAjo957fbG0U8R6mzfCB2KMj6sSIEPNYR5g0-vyAPX36XCyD10hTnnEAq0YfHfpCsO-6uBqEs7nZRwoHa_ZfUAVpj9GEFVrH1v2Qy5n2mvmZFxFloMMhexyG1BzU2ZWma5OTLqk8GizZuaB7MUWLTZoVbemX0nz45NmHhB0cvq2c4i_g6zwROkZdR9B2bKPx9f6KCQWeoT2X1QxVmkujyUzAqbvOAfSzV1w8J88kINunB8sM8CzdsPcPuHnSzZl9kRik60JnE75t7p3muTub73yJtxv2rt4CwqI3OoR8lKFlS6P06N7-7tt9Km4k8kUWYS7z1ip_FBiEuJHHFQVQhk-KuNIybMwh_b_HetA1frAXEa8Gk&lptoken=167666f484fe845d1432
ocsp.digicert.com/
200 OK 471 B IP
Hash dd283dfc036535bdeb8a8be1310ef930
d3b1c300dd75d7af630e0f3112e49d7492d66c17
578f9256faa188facb3f2d68b02b0c7fb2e30e02e2e74234d015429563cba7aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2155
Cache-Control: max-age=99928
Content-Type: application/ocsp-response
Date: Thu, 27 Oct 2022 04:57:14 GMT
Etag: "6358ea97-1d7"
Expires: Fri, 28 Oct 2022 08:42:42 GMT
Last-Modified: Wed, 26 Oct 2022 08:06:47 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uB+xbi4oYRGFdcyfmYb6Iw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Y4w/6reZNLOn4hXUAFaSn9BfHtA=
24.winprizes524.digital/idpp2/prizewheels9.png
200 OK 22 kB URL HTTP/2 24.winprizes524.digital/idpp2/prizewheels9.png
IP
File type PNG image data, 501 x 501, 8-bit colormap, non-interlaced\012- data
Hash e21244a71b4298e0e5983078f2989437
04a882d4e280d6969342f1f06c764dcf83191cf4
8184cf7edcbf08e5dd5a28fcfea30405e44d2229a7192d01345e872316463c50
GET /idpp2/prizewheels9.png HTTP/1.1
Host: 24.winprizes524.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 27 Oct 2022 04:57:15 GMT
content-type: image/png
content-length: 21521
last-modified: Sat, 11 Dec 2021 02:39:24 GMT
etag: "5411-5d2d5bf69e661"
accept-ranges: bytes
X-Firefox-Spdy: h2
24.winprizes524.digital/idpp2/samblack.png
200 OK 5.1 kB URL HTTP/2 24.winprizes524.digital/idpp2/samblack.png
IP
File type PNG image data, 105 x 208, 8-bit colormap, non-interlaced\012- data
Hash 232f8d7016f7970a0d68b23bff426a9a
5468716e9d1d07dff30b3f1218900c835ca6408d
c536c8c959448f75b9d64f13f3bd0aa14ab100c2b8112cd7eb6295eb37ed2d24
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /idpp2/samblack.png HTTP/1.1
Host: 24.winprizes524.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 27 Oct 2022 04:57:15 GMT
content-type: image/png
content-length: 5147
last-modified: Sat, 11 Dec 2021 02:39:25 GMT
etag: "141b-5d2d5bf7b99a6"
accept-ranges: bytes
X-Firefox-Spdy: h2
24.winprizes524.digital/idpp2/samblue.png
200 OK 5.8 kB URL HTTP/2 24.winprizes524.digital/idpp2/samblue.png
IP
File type PNG image data, 105 x 208, 8-bit colormap, non-interlaced\012- data
Hash dd356f981f6a8bf0a4c13bc7042bdd03
72af2fcb778b74519c06acc09ab468b5df6f23ba
c615360fbc118b4a7d0ffd019369b635af1d07aa59f0dc0e50bd013e7dc482ce
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /idpp2/samblue.png HTTP/1.1
Host: 24.winprizes524.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 27 Oct 2022 04:57:15 GMT
content-type: image/png
content-length: 5754
last-modified: Sat, 11 Dec 2021 02:39:26 GMT
etag: "167a-5d2d5bf7f1447"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1343d02c2e5c62ed27aafc9dfda0041b
845b93a5799fbe620b4ae0dfd2ebd076af5dadce
83cf571aeec3a9d7c2f8c897fe08b3032f04b18dc878ec82295d424a76d0a3c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "83CF571AEEC3A9D7C2F8C897FE08B3032F04B18DC878EC82295D424A76D0A3C3"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 27 Oct 2022 10:57:15 GMT
Date: Thu, 27 Oct 2022 04:57:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5112
Expires: Thu, 27 Oct 2022 06:22:27 GMT
Date: Thu, 27 Oct 2022 04:57:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5112
Expires: Thu, 27 Oct 2022 06:22:27 GMT
Date: Thu, 27 Oct 2022 04:57:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5112
Expires: Thu, 27 Oct 2022 06:22:27 GMT
Date: Thu, 27 Oct 2022 04:57:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5112
Expires: Thu, 27 Oct 2022 06:22:27 GMT
Date: Thu, 27 Oct 2022 04:57:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0adbfd8c-a321-44a3-8868-d35a73c257e5.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0adbfd8c-a321-44a3-8868-d35a73c257e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 507512b4f0d66737e609ee831aaced9a
4a02fa85f4fafa2d3f9970502c9e5eef66689682
cf201785c30d840065787d01024ebef68279e6533a2f9aa719b6916316189875
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0adbfd8c-a321-44a3-8868-d35a73c257e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10142
x-amzn-requestid: fa034f0f-bc99-44de-8554-2b1cd03dd2e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apVDXGqMIAMFwnA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a0215-6dee5133595e6f085df66f3e;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 03:59:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 55dwYGRQAZ15V0W8y2JVE3gRvJL5AdO6yIz1S_eXJrxoMzpcyxX0sA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 04:09:25 GMT
age: 2870
etag: "4a02fa85f4fafa2d3f9970502c9e5eef66689682"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f76b27f-20d2-4f67-9182-ea9c8da749a1.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f76b27f-20d2-4f67-9182-ea9c8da749a1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0b2a9369fbecb4c2543d616eb054b80c
b940acbcde5370ab0d8f94f8536822d413d79255
55e6b81bfaba44c3eb7d038499d6b5cf8f0649386aa8aba9aef51a69b2c0cad5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f76b27f-20d2-4f67-9182-ea9c8da749a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6855
x-amzn-requestid: 6a2e4f75-dc1c-454f-8b8a-3a6e7b9fd39d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apTuSGzUoAMFmsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359fff4-50f1550123adb1192d89e442;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 03:50:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rVJQTBkML73Qsep_bhMExSK9ht7dYCD5y1L8sXCKz5Tywl_QAM4ClA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 03:54:09 GMT
age: 3786
etag: "b940acbcde5370ab0d8f94f8536822d413d79255"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fa231f6-08e2-49de-9ab2-8c002a759ddc.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fa231f6-08e2-49de-9ab2-8c002a759ddc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec5c0d55827983bdda75bcfe1653777d
55dd4d67b48890698d9a0730ec26d2fdb03b5999
79c842ee4b5ae7f27e66f260fa0443950a888a94e13bfc7d210509da566db35a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fa231f6-08e2-49de-9ab2-8c002a759ddc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6004
x-amzn-requestid: 909ac48e-7465-4d17-9518-ed23818b5dd2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apV_cFPtoAMFQHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a0395-21a2d1181e2422703d390fbe;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 04:05:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _1lOXq5k7kLe2qTW_v4LJdg_M3injZwRmEt2cukLy5zQgPuT6HY-Rw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 04:10:46 GMT
age: 2789
etag: "55dd4d67b48890698d9a0730ec26d2fdb03b5999"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
shanaurg.net/pfe/current/micro.tag.min.js?z=3803988&sw=/sw-check-permissions-2f690.js
200 OK 33 kB URL HTTP/2 shanaurg.net/pfe/current/micro.tag.min.js?z=3803988&sw=/sw-check-permissions-2f690.js
IP
Hash 24fb3b4992576660e6cf3c6bbd5591ae
22d8b0aa3b761e44ffe703256fe93173849ebf25
22bd6495be0a7c3e39399a4bf5d2f3567dd19a40c7323a904409595db46e4e69
GET /pfe/current/micro.tag.min.js?z=3803988&sw=/sw-check-permissions-2f690.js HTTP/1.1
Host: shanaurg.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 27 Oct 2022 04:57:15 GMT
content-type: application/javascript
last-modified: Tue, 25 Oct 2022 09:56:56 GMT
etag: W/"6357b2e8-12763"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F468f05a4-ac72-4a66-8993-53a827bffd49.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F468f05a4-ac72-4a66-8993-53a827bffd49.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 134b31ca1a6cb74ab6f6c21e27114883
bb13bb4f8876e00be7fb70e0b4f6cd52d0165458
539ee95d515835ade79c63a5c85c138678019563ac0e2f86bcfd7fcc0dc9dce2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F468f05a4-ac72-4a66-8993-53a827bffd49.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7436
x-amzn-requestid: 58eb8ffe-f4e6-40f0-a5b0-8c5cb3d32b21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apWAYGh4IAMF0Yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a039b-742161244dced54246938f0d;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 04:05:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: KVQ_mvfxGRPLkqBXDjCksjKai7YkIRYvhoRxXJ31A38fDNyJaBl1Wg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 04:10:46 GMT
age: 2789
etag: "bb13bb4f8876e00be7fb70e0b4f6cd52d0165458"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb430e5efbc6c8c306fce87e26faf734
b05b7299a7e473e873510671a6abdd5227a53f46
c49d64e87ec8243a1ee7f214f21988b6f6a33ba93814ec31262d80e4a22b8504
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8936
x-amzn-requestid: d0698fc0-e4c9-4633-9b64-df09be35b450
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aocuiGBlIAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359a7f6-7c78a1fc43552b934e6b8708;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 21:34:46 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gus8UKo03dRkfqPRhxnW6zzqx7o-2tZbbv-DsBSW7UREHPOA1uqdUw==
via: 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 21:47:37 GMT
etag: "b05b7299a7e473e873510671a6abdd5227a53f46"
content-type: image/jpeg
age: 25778
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
24.winprizes524.digital/favicon.ico
404 Not Found 0 B URL HTTP/2 24.winprizes524.digital/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: 24.winprizes524.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 27 Oct 2022 04:57:16 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
24.winprizes524.digital/idpp2/idppnotix22.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=svBpQ_EwqH8Ryilm16qgZ8f36BNos0XXNgx8axM64--L16BBxTAAQUQOwXsAjo957fbG0U8R6mzfCB2KMj6sSIEPNYR5g0-vyAPX36XCyD10hTnnEAq0YfHfpCsO-6uBqEs7nZRwoHa_ZfUAVpj9GEFVrH1v2Qy5n2mvmZFxFloMMhexyG1BzU2ZWma5OTLqk8GizZuaB7MUWLTZoVbemX0nz45NmHhB0cvq2c4i_g6zwROkZdR9B2bKPx9f6KCQWeoT2X1QxVmkujyUzAqbvOAfSzV1w8J88kINunB8sM8CzdsPcPuHnSzZl9kRik60JnE75t7p3muTub73yJtxv2rt4CwqI3OoR8lKFlS6P06N7-7tt9Km4k8kUWYS7z1ip_FBiEuJHHFQVQhk-KuNIybMwh_b_HetA1frAXEa8Gk&lptoken=167666f484fe845d1432
200 OK 0 B URL HTTP/2 24.winprizes524.digital/idpp2/idppnotix22.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=svBpQ_EwqH8Ryilm16qgZ8f36BNos0XXNgx8axM64--L16BBxTAAQUQOwXsAjo957fbG0U8R6mzfCB2KMj6sSIEPNYR5g0-vyAPX36XCyD10hTnnEAq0YfHfpCsO-6uBqEs7nZRwoHa_ZfUAVpj9GEFVrH1v2Qy5n2mvmZFxFloMMhexyG1BzU2ZWma5OTLqk8GizZuaB7MUWLTZoVbemX0nz45NmHhB0cvq2c4i_g6zwROkZdR9B2bKPx9f6KCQWeoT2X1QxVmkujyUzAqbvOAfSzV1w8J88kINunB8sM8CzdsPcPuHnSzZl9kRik60JnE75t7p3muTub73yJtxv2rt4CwqI3OoR8lKFlS6P06N7-7tt9Km4k8kUWYS7z1ip_FBiEuJHHFQVQhk-KuNIybMwh_b_HetA1frAXEa8Gk&lptoken=167666f484fe845d1432
IP
GET /idpp2/idppnotix22.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=svBpQ_EwqH8Ryilm16qgZ8f36BNos0XXNgx8axM64--L16BBxTAAQUQOwXsAjo957fbG0U8R6mzfCB2KMj6sSIEPNYR5g0-vyAPX36XCyD10hTnnEAq0YfHfpCsO-6uBqEs7nZRwoHa_ZfUAVpj9GEFVrH1v2Qy5n2mvmZFxFloMMhexyG1BzU2ZWma5OTLqk8GizZuaB7MUWLTZoVbemX0nz45NmHhB0cvq2c4i_g6zwROkZdR9B2bKPx9f6KCQWeoT2X1QxVmkujyUzAqbvOAfSzV1w8J88kINunB8sM8CzdsPcPuHnSzZl9kRik60JnE75t7p3muTub73yJtxv2rt4CwqI3OoR8lKFlS6P06N7-7tt9Km4k8kUWYS7z1ip_FBiEuJHHFQVQhk-KuNIybMwh_b_HetA1frAXEa8Gk&lptoken=167666f484fe845d1432 HTTP/1.1
Host: 24.winprizes524.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 27 Oct 2022 04:57:14 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sat, 25 Jun 2022 02:17:47 GMT
etag: W/"4d74-5e23c4af6e229"
content-encoding: br
X-Firefox-Spdy: h2
24.winprizes524.digital/idpp2/jquery.min.js
200 OK 0 B URL HTTP/2 24.winprizes524.digital/idpp2/jquery.min.js
IP
GET /idpp2/jquery.min.js HTTP/1.1
Host: 24.winprizes524.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 27 Oct 2022 04:57:15 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 11 Dec 2021 02:39:23 GMT
etag: W/"149a0-5d2d5bf4e9df9"
content-encoding: br
X-Firefox-Spdy: h2
45.76.148.82
139.45.197.250
23.36.77.32
34.160.144.191