Overview

URLsmoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
IP 52.2.18.249 (United States)
ASN#14618 AMAZON-AES
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-05-26 05:43:20 UTC
StatusLoading report..
IDS alerts0
Blocklist alert6
urlquery alerts No alerts detected
Tags None

Domain Summary (17)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
d2m2wsoho8qq12.cloudfront.net (1) 0 2013-05-25 05:15:49 2023-05-25 07:21:37 706 4037 54.230.245.201
deviceid.trueleadid.com (1) 2097 2018-07-10 07:19:41 2023-05-25 06:14:17 713 4503 3.231.15.165
smoothreward.com (11) 0 2016-02-15 04:49:01 2023-05-15 18:26:22 6533 258299 107.21.226.142
cdnjs.cloudflare.com (1) 235 2015-04-17 22:46:33 2023-05-25 05:09:28 442 7191 104.17.24.14
amclicks.com (2) 112152 2012-08-07 17:37:23 2023-05-25 12:06:03 923 1036 107.21.226.142
pushpros.tech (1) 247253 2020-07-31 05:20:35 2023-05-25 11:42:41 495 2715 108.157.214.55
s3.amazonaws.com (1) 0 2020-05-13 22:53:44 2023-05-25 16:22:16 420 13680 52.216.43.104
api.trustedform.com (6) 23021 2012-10-29 06:30:13 2023-05-25 07:38:59 3138 2257 35.175.169.146
signals.aimtell.com (1) 10531 2021-09-03 19:36:18 2023-05-25 07:43:13 506 573 104.18.31.151
netdna.bootstrapcdn.com (3) 3413 2012-09-07 17:11:00 2023-05-25 10:21:10 1402 99445 104.18.11.207
fonts.gstatic.com (1) 0 2014-09-09 02:40:21 2023-05-25 18:22:51 526 32397 142.250.74.3
fonts.googleapis.com (1) 8877 2013-06-10 22:14:26 2023-05-25 09:38:26 433 1751 142.250.74.106
ajax.googleapis.com (1) 12905 2013-08-16 11:51:31 2023-05-25 16:08:25 433 31290 142.250.74.106
cdn.trustedform.com (2) 24659 2020-08-27 01:38:48 2023-05-25 16:03:26 948 43345 54.230.111.60
create.leadid.com (7) 14598 2014-01-22 14:55:11 2023-05-25 07:24:10 4270 5666 3.213.164.48
maxcdn.bootstrapcdn.com (1) 724 2014-06-18 02:37:31 2023-05-25 08:08:51 445 51432 104.18.11.207
create.lidstatic.com (1) 24133 2015-09-23 21:42:02 2023-05-25 07:21:36 466 126918 104.22.38.182

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-05-26 medium smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/1089 (...) Phishing
2023-05-26 medium smoothreward.com/assets/js/pop_window.js Phishing
2023-05-26 medium smoothreward.com/assets/js/plugins/email.verify.1.1.js Phishing
2023-05-26 medium smoothreward.com/assets/js/jquery.email-autocomplete.min.js Phishing
2023-05-26 medium smoothreward.com/assets/js/templ_standard_js.min.js Phishing
2023-05-26 medium smoothreward.com/assets/js/jquery.email-autocomplete.min.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.2.18.249
Date UQ / IDS / BL URL IP
2023-06-01 18:05:16 UTC 0 - 1 - 0 monthlysweeps.us/go/to/1b0eab/key/b0b0663a402 (...) 52.2.18.249
2023-05-29 11:27:05 UTC 0 - 0 - 10 prizepagoda.com/go/to/72d25f/key/f6aaa8fb2879 (...) 52.2.18.249
2023-05-28 18:10:47 UTC 0 - 0 - 7 prizepagoda.com/go/to/72d25f/key/f6aaa8fb2879 (...) 52.2.18.249
2023-05-28 15:59:38 UTC 0 - 0 - 8 prizepagoda.com/go/to/72d25f/key/a0d03d295591 (...) 52.2.18.249
2023-05-28 14:50:28 UTC 0 - 0 - 8 amclicks.com/clk.php?c=7384&p=10899&s1=676047 (...) 52.2.18.249


Last 5 reports on ASN: AMAZON-AES
Date UQ / IDS / BL URL IP
2023-06-06 05:14:15 UTC 0 - 2 - 2 exeupp.com/i.exe 52.86.6.113
2023-06-06 05:13:28 UTC 0 - 3 - 0 mail.donotreply.biz/XV0RWM1kyNXNUVFF4VEc5R1p6 (...) 35.169.197.209
2023-06-06 05:13:00 UTC 0 - 2 - 0 www.runtime.org/winraid.zip 54.243.29.218
2023-06-06 05:13:00 UTC 0 - 2 - 0 www.runtime.org/nas.zip 54.243.29.218
2023-06-06 04:59:03 UTC 0 - 3 - 0 xprt.com/DL-Email?Token=EE09ACE3-1F02-4B30-BA (...) 107.23.71.35


Last 5 reports on domain: smoothreward.com
Date UQ / IDS / BL URL IP
2023-05-28 12:01:46 UTC 0 - 0 - 8 smoothreward.com/go/to/72d25f/key/38dfd6ffd37 (...) 52.2.18.249
2023-05-26 16:21:25 UTC 0 - 0 - 8 smoothreward.com/go/to/72d25f/key/b152c49fa73 (...) 107.21.226.142
2023-05-26 05:43:20 UTC 0 - 0 - 6 smoothreward.com/go/to/786ac2/key/cb3cae68391 (...) 52.2.18.249
2023-05-18 05:27:26 UTC 0 - 0 - 6 smoothreward.com/go/to/5g232f/key/04b9df56c04 (...) 107.21.226.142
2023-05-18 04:02:12 UTC 0 - 0 - 7 smoothreward.com/go/to/5g232f/key/5bb0c28fe27 (...) 52.2.18.249


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-05-06 16:21:29 UTC 0 - 0 - 5 prizepagoda.com/go/to/786ac2/key/7af722a8dc86 (...) 54.92.232.232
2023-05-06 16:21:20 UTC 0 - 0 - 5 prizepagoda.com/go/to/786ac2/key/7af722a8dc86 (...) 54.92.232.232
2023-05-05 17:18:01 UTC 0 - 0 - 5 prizepagoda.com/go/to/786ac2/key/7af722a8dc86 (...) 54.92.232.232
2023-05-05 17:14:30 UTC 0 - 0 - 6 prizepagoda.com/go/to/786ac2/key/7af722a8dc86 (...) 54.92.232.232
2023-05-05 16:45:19 UTC 0 - 0 - 6 prizepagoda.com/go/to/786ac2/key/7af722a8dc86 (...) 52.2.18.249

JavaScript

Executed Scripts (25)

Executed Evals (1)
#1 JavaScript::Eval (size: 14) - SHA256: 0510de046e8325540849bad09f31eaaa3e9256fafd330c5d57327dc948812a33
/*@cc_on!@*/ !1

Executed Writes (0)


HTTP Transactions (42)


Request Response
                                        
                                            GET /go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112 HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:00 GMT
content-length: 17004
server: Apache/2.4.41 (Ubuntu)
set-cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50; path=/; HttpOnly; SameSite=Lax
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, no-store, max-age=0, no-cache
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2499)
Size:   17004
Md5:    a55094a3a81a8fdf2d86a4a89dd4cfec
Sha1:   cf2258532ab8ec9c1bc5852418665f6631273e83
Sha256: 226c43ee049b4202d3a117eeb3ad9d0af5ebcb6e2ebae4c97502e450605eacbf

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /ajax/libs/popper.js/1.12.3/umd/popper.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 6174
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4b24"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3713240
expires: Wed, 15 May 2024 05:43:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jkq2KWxZmXVbW8IMMTNc%2FL4FNPpsIi%2BlipoWUckAExQW2u79G0oGfSB37j3weP5ZLcFEGvYLOZmStfHTCcOVsVDiuR5B92yc%2F34TSC9rc8o0XjejXhc5oN2ngY45huYavKtI2%2F22"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7cd3b2b7e8751c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19063)
Size:   6174
Md5:    aad2475f1e2615224fa9716b53954be2
Sha1:   4f08d328c845410583e0a05c8d5a5bc61c23db47
Sha256: 8e95b881702116fa860c3e41ef7ebaac83c3ecf0db026aaae023b46671db74ce
                                        
                                            GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 06:56:45 GMT
expires: Wed, 22 May 2024 06:56:45 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
vary: Accept-Encoding
age: 254776
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   30306
Md5:    c9f5aeeca3ad37bf2aa006139b935f0a
Sha1:   1055018c28ab41087ef9ccefe411606893dabea2
Sha256: 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
                                        
                                            GET /css/loading_icon_1.css HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 0
location: https://amclicks.com/clk.php?c=7749&p=504&s1=lead_root&s2=smoothreward.com
server: Apache/2.4.41 (Ubuntu)
X-Firefox-Spdy: h2

                                        
                                            GET /assets/img/footer_satisfaction.png HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 6736
server: Apache/2.4.41 (Ubuntu)
last-modified: Fri, 20 Oct 2017 13:05:36 GMT
etag: "1a50-55bfa20ee6800"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 95 x 95, 8-bit colormap, non-interlaced\012- data
Size:   6736
Md5:    34e8e980148b64284092e4198408c752
Sha1:   e7a54183d915fc8790a91f3c27f1c868e1f21156
Sha256: 9e79cb2435516522ff45c5285b6b57f21ac9fbba158ca92d98b20d39db6b0503
                                        
                                            GET /assets/js/pop_window.js HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 752
server: Apache/2.4.41 (Ubuntu)
last-modified: Mon, 26 Jul 2021 18:17:14 GMT
etag: "1085-5c80ac33e7600-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   752
Md5:    5ab611ffa62c4d2208e8b06c984337ec
Sha1:   7b1f19e115be9f0b90d7791ce2ca85e5ee536b82
Sha256: c878606d2efe52e77a736f5bca231a2a62281697138d10416088282fd8a090ee

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/js/plugins/email.verify.1.1.js HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 1470
server: Apache/2.4.41 (Ubuntu)
last-modified: Mon, 26 Jul 2021 18:17:14 GMT
etag: "14c2-5c80ac33e27e0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  assembler source, ASCII text, with very long lines (947)
Size:   1470
Md5:    172c7088f34c1c375ae260a028a9f0cf
Sha1:   150684d6ffcd2e12727954790e17685b3410ff95
Sha256: d3c8d6a7d5f212160de2ead76c91e553cd29e8f2271536586ccb41d401fab4ad

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/js/jquery.email-autocomplete.min.js HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 1279
server: Apache/2.4.41 (Ubuntu)
last-modified: Mon, 26 Jul 2021 18:17:10 GMT
etag: "c5e-5c80ac301ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2986)
Size:   1279
Md5:    e52c1b9d782a5f900404c7d6b19913b3
Sha1:   92a6f34824da998a181a36ede877ffb611a194aa
Sha256: 369f3c1ba5e42e3b55ca10f6cf763f5e6811af0f44e0b61b84852aa19081de3e

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/js/templ_standard_js.min.js HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 981
server: Apache/2.4.41 (Ubuntu)
last-modified: Thu, 11 Nov 2021 17:25:09 GMT
etag: "987-5d0869fd7fe28-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (937)
Size:   981
Md5:    36eb8ad9bbfc0fb3de0c0724e98056e4
Sha1:   0d26daccbee4cd7fbc3b0d1c154c9d30d3449e45
Sha256: aa7506c4bb3cd1be57d7e487d908bc0a299beef8ee09950189dcd39d691566d9

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /clk.php?c=7749&p=504&s1=lead_root&s2=smoothreward.com HTTP/1.1 
Host: amclicks.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://smoothreward.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             107.21.226.142
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 0
location: https://amclicks.com/x/7749/504/0/lead_root/smoothreward.com/0/0/0/0/
server: Apache/2.4.41 (Ubuntu)
X-Firefox-Spdy: h2

                                        
                                            GET /x/7749/504/0/lead_root/smoothreward.com/0/0/0/0/ HTTP/1.1 
Host: amclicks.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://smoothreward.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:01 GMT
content-length: 170
server: Apache/2.4.41 (Ubuntu)
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: ci_session=31g1up06u5p1uvhrgfv801l02vj0trvr; expires=Fri, 26-May-2023 07:43:01 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax ref=1; expires=Fri, 26-May-2023 06:43:01 GMT; Max-Age=3600 referrer=https%3A%2F%2Fsmoothreward.com%2F; expires=Fri, 26-May-2023 06:43:01 GMT; Max-Age=3600
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   170
Md5:    1323df41ce43b1cc382c4fedc6853bf0
Sha1:   4eff11fc39c5c5b311c54f132ed7ad66144eba12
Sha256: 5b8c653bf68b4363fa23c93b2ac8ac299b1d0d33ed6ec68008847ec5165bb3dc
                                        
                                            GET /assets/js/jquery.email-autocomplete.min.js HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 26 May 2023 05:43:02 GMT
content-length: 1279
server: Apache/2.4.41 (Ubuntu)
last-modified: Mon, 26 Jul 2021 18:17:10 GMT
etag: "c5e-5c80ac301ea00-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2986)
Size:   1279
Md5:    e52c1b9d782a5f900404c7d6b19913b3
Sha1:   92a6f34824da998a181a36ede877ffb611a194aa
Sha256: 369f3c1ba5e42e3b55ca10f6cf763f5e6811af0f44e0b61b84852aa19081de3e

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /s/playball/v17/TK3gWksYAxQ7jbsKcg8Eneo.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.3
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 00:17:37 GMT
expires: Thu, 23 May 2024 00:17:37 GMT
cache-control: public, max-age=31536000
age: 192325
last-modified: Tue, 02 May 2023 16:04:09 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 31564, version 1.0\012- data
Size:   31564
Md5:    34b8d410c61dcbac31c06d4e72e17e22
Sha1:   f8edc32d045953f1190f2503da2bd590048f5fc6
Sha256: 21a5a1944ae56ff8b3142b32a4e54eab52dd4a630d2161179b8b98a5cbe8b80d
                                        
                                            GET /GetPushScript?key=2Xa3N8H4tIMDq5DaLOjgimHq4HG8UhWO&domain=smoothreward.com HTTP/1.1 
Host: pushpros.tech
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://smoothreward.com/
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             108.157.214.55
HTTP/2 200 OK
content-type: application/json
                                            
content-length: 2182
date: Fri, 26 May 2023 05:43:02 GMT
x-amzn-requestid: 0902fa0d-420f-42f6-82de-bf3a0c78eeae
access-control-allow-origin: *
x-amz-apigw-id: FhAEDF7KoAMFSew=
x-amzn-trace-id: Root=1-647046e6-6f825a837c038b747909a8b7;Sampled=0;lineage=ce85cba6:0
x-cache: Miss from cloudfront
via: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: M3S8MGFfo0yeDMKrObphe6plbYe5G83ys69BuiDj-Z9fkUt842CnlA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (2182), with no line terminators
Size:   2182
Md5:    e338c947da1846416edc066821dd1034
Sha1:   d30a02acdf5f730e46f763410c6dfae8d368272b
Sha256: 02167d54ebacf1dd76f32ab13cd6b899f22255205ddb40a7411f96d76f4a72cb
                                        
                                            GET /assets/img/campaign/317_welcome.jpg HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Fri, 26 May 2023 05:43:02 GMT
content-length: 140411
server: Apache/2.4.41 (Ubuntu)
last-modified: Thu, 10 Feb 2022 20:25:53 GMT
etag: "2247b-5d7afc1bfb7a8"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 928x641, components 3\012- data
Size:   140411
Md5:    f8ceedf248eebb3fff416aaf9e922381
Sha1:   a495e89f4d916dc8951127dc0411058baeb323cd
Sha256: cccd8f83af80fd5bbe8831fb899b560325978f8a1ff897fd4cc1257e01a9a1d9
                                        
                                            GET /trustedform.js?provide_referrer=false&field=trusted_form&l=16850797820790.8381321346088946&invert_field_sensitivity=false HTTP/1.1 
Host: api.trustedform.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             35.175.169.146
HTTP/2 301 Moved Permanently
content-type: text/html
                                            
server: awselb/2.0
date: Fri, 26 May 2023 05:43:02 GMT
content-length: 134
location: https://cdn.trustedform.com:443/bootstrap.js?provide_referrer=false&field=trusted_form&l=16850797820790.8381321346088946&invert_field_sensitivity=false
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   134
Md5:    4aa7a432bb447f094408f1bd6229c605
Sha1:   1965c4952cc8c082a6307ed67061a57aab6632fa
Sha256: 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
                                        
                                            GET /trackpush/trackpush.min.js HTTP/1.1 
Host: s3.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             52.216.43.104
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
x-amz-id-2: DgPuXjbRx8S5qKqUG14gi3dtt1e4UTu5xZH9YVEUqc0F+snwmXuv6UhJqBQ6bkEZi+WJQnFwLoM=
x-amz-request-id: 1Z2XTH6WE6KW9P8R
Date: Fri, 26 May 2023 05:43:03 GMT
Last-Modified: Thu, 03 Nov 2022 18:51:50 GMT
ETag: "cbd14612441d2cca730df2e3c9f185c1"
Cache-Control: max-age=86400
Content-Encoding: gzip
Accept-Ranges: bytes
Server: AmazonS3
Content-Length: 13264


--- Additional Info ---
Magic:  ASCII text, with very long lines (47625), with no line terminators
Size:   13264
Md5:    d470356148c00da67db3c9bdaecc90f9
Sha1:   d12a4df31633cf9a982bd6e8c3ffbc2449b1753f
Sha256: 5ea9947b55246bd7e281b10027a5ed301039077b0589afff470b73c561a93054
                                        
                                            GET /bootstrap.js?provide_referrer=false&field=trusted_form&l=16850797820790.8381321346088946&invert_field_sensitivity=false HTTP/1.1 
Host: cdn.trustedform.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://smoothreward.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.111.60
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 26 May 2023 05:43:03 GMT
last-modified: Fri, 12 May 2023 16:55:50 GMT
x-amz-version-id: 3_b23spJZawDo2DonqGySoPkWa3Umuag
etag: W/"88ddf717f635b54023edd7480431e1d1"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kkQhqWCH-qEUBgmFXfj_qrEyLKSz99blmtVm6PdfqYYokC2NcsKTpQ==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7517)
Size:   4477
Md5:    71a14c36b543924938cdd2774f74d563
Sha1:   4b75c83fc754248057f57b551bdeb8172822117e
Sha256: e6ac2443af0857211cba9330425f011364b1704f2d3a132f2d2f48d659f6abbc
                                        
                                            POST /pageview?id_site=12415&v=3.974&support=0&state=default&wl=1 HTTP/1.1 
Host: signals.aimtell.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

                                        
                                             104.18.31.151
HTTP/2 200 OK
content-type: image/gif
                                            
date: Fri, 26 May 2023 05:43:03 GMT
content-length: 43
access-control-allow-origin: https://smoothreward.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-expose-headers: Aimtell-Hash-Exists, Aimtell-Traverse, Aimtell-Signal
aimtell-hash-exists: 0
aimtell-signal: 0
aimtell-traverse: 0
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd3b2c4ea14b524-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /assets/img/campaign/317_icon.png HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50; leadid_token-FCB958C1-1AC9-561E-1E7C-7EB79158EEC4-3CCED9A6-4A67-D637-ACDC-CCF79B4A5210=595E8A8F-3D3F-055C-BDBE-379675B48FC8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Fri, 26 May 2023 05:43:03 GMT
content-length: 42571
server: Apache/2.4.41 (Ubuntu)
last-modified: Thu, 10 Feb 2022 20:25:52 GMT
etag: "a64b-5d7afc1b98d88"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   42571
Md5:    734aa434082d641fc8524c0fe6ee059e
Sha1:   f97752449b40d1ae65d4cb976f93c08933d8c37f
Sha256: b8911ae0a22c7fcb29af1e31048b6c2bf298d8513ae92f3a805a1c3b20483eb3
                                        
                                            POST /certs HTTP/1.1 
Host: api.trustedform.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 636
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             35.175.169.146
HTTP/2 201 Created
content-type: application/json; charset=utf-8
                                            
date: Fri, 26 May 2023 05:43:04 GMT
content-length: 475
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (475), with no line terminators
Size:   475
Md5:    4e99759a1f2205f115890f52a15c55b6
Sha1:   41ebeff0992fae38b594987359803b92b80e6505
Sha256: b47ae97231920e038c7fb1f957c508aed124d76e2ed90e453a30a2a2d20da5be
                                        
                                            GET /trustedform-1.8.39.js HTTP/1.1 
Host: cdn.trustedform.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             54.230.111.60
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 12 May 2023 16:55:50 GMT
x-amz-version-id: OadgesbszW_FbzYEqgjtb7SPpT8rHyZy
server: AmazonS3
content-encoding: gzip
date: Fri, 26 May 2023 05:43:04 GMT
etag: W/"9c2830f2c2e5b9cb27e0e7f151317cbe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AowsNyDVBhjdxJXXFWM84w_ldaX5D3xDWtghLDKgr69y9ZRPMTAI5g==
age: 12
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   37832
Md5:    9c2830f2c2e5b9cb27e0e7f151317cbe
Sha1:   7e0b45f1cf0f826b0aaaf792e20bdd77d27c6b3a
Sha256: fe63c3d6c4d4486e0a2323e205377a04c96e054f37f4d87a7b8bab0091c19c14
                                        
                                            POST /certs/d1da8e3df12da18870a92e41fc983107a726b62b/fingerprints HTTP/1.1 
Host: api.trustedform.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 176
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             35.175.169.146
HTTP/2 204 No Content
                                            
date: Fri, 26 May 2023 05:43:04 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2

                                        
                                            GET /assets/img/campaign/317_icon.png HTTP/1.1 
Host: smoothreward.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/go/to/786ac2/key/cb3cae68391af1f7531f9790e6bb75c8/aid/10899/s1/665112
Cookie: ci_session=37b2bdhl9tv6ar5mu8lppkkrad2tte50; leadid_token-FCB958C1-1AC9-561E-1E7C-7EB79158EEC4-3CCED9A6-4A67-D637-ACDC-CCF79B4A5210=595E8A8F-3D3F-055C-BDBE-379675B48FC8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             107.21.226.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Fri, 26 May 2023 05:43:04 GMT
content-length: 42571
server: Apache/2.4.41 (Ubuntu)
last-modified: Thu, 10 Feb 2022 20:25:52 GMT
etag: "a64b-5d7afc1b98d88"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   42571
Md5:    734aa434082d641fc8524c0fe6ee059e
Sha1:   f97752449b40d1ae65d4cb976f93c08933d8c37f
Sha256: b8911ae0a22c7fcb29af1e31048b6c2bf298d8513ae92f3a805a1c3b20483eb3
                                        
                                            POST /2.11.9/InitFormData?msn=4&pid=760bb20e-b797-4048-82f0-79fb6d3a52d0&token=595E8A8F-3D3F-055C-BDBE-379675B48FC8&_=701766502 HTTP/1.1 
Host: create.leadid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 1060
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             3.213.164.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:04 GMT
server: nginx
set-cookie: rgisanonymous=false; expires=Sun, 25-Jun-2023 05:43:04 GMT; Max-Age=2592000; path=/ rguserid=05d1ae4d-41d3-4b34-8606-cf4cfb92c047; expires=Sun, 25-Jun-2023 05:43:04 GMT; Max-Age=2592000; path=/ rguuid=true; expires=Sun, 25-Jun-2023 05:43:04 GMT; Max-Age=2592000; path=/ rgisanonymous=true; expires=Sun, 25-Jun-2023 05:43:04 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   20
Md5:    7029066c27ac6f5ef18d660d5741979a
Sha1:   46c6643f07aa7f6bfe7118de926b86defc5087c4
Sha256: 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
                                        
                                            POST /certs/d1da8e3df12da18870a92e41fc983107a726b62b/events HTTP/1.1 
Host: api.trustedform.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 462
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             35.175.169.146
HTTP/2 204 No Content
                                            
date: Fri, 26 May 2023 05:43:04 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2

                                        
                                            POST /certs/d1da8e3df12da18870a92e41fc983107a726b62b/events HTTP/1.1 
Host: api.trustedform.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 222
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             35.175.169.146
HTTP/2 204 No Content
                                            
date: Fri, 26 May 2023 05:43:05 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2

                                        
                                            GET /twitter-bootstrap/2.3.2/css/bootstrap-combined.no-icons.min.css HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.11.207
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Fri, 26 May 2023 05:43:01 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:05:01 GMT
cdn-cachedat: 08/03/2021 13:26:07
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: b6ea5ef779bb3c6d58c6f87bad8a05ce
cdn-cache: HIT
cf-cache-status: HIT
age: 30525895
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7cd3b2b7bdbfb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1463)
Size:   36894
Md5:    3f13279317ad7da1178553ff245ab56d
Sha1:   8a0ba39740d2c05b52bb0ed6eafc7a0c4f32912e
Sha256: 75a721f6f467fcda98080593f318b78ff31558e822d283d473cabd3ad0d49b24
                                        
                                            POST /2.11.9/InitFormData?msn=3&pid=760bb20e-b797-4048-82f0-79fb6d3a52d0&token=595E8A8F-3D3F-055C-BDBE-379675B48FC8&_=701766501 HTTP/1.1 
Host: create.leadid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 1252
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             3.213.164.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:03 GMT
server: nginx
set-cookie: rgisanonymous=false; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rguserid=a4b16dee-1bb0-4e86-8d8b-d5420de66ae5; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rguuid=true; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rgisanonymous=true; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2


                                        
                                            POST /2.11.9/Snap?msn=6&pid=760bb20e-b797-4048-82f0-79fb6d3a52d0&token=595E8A8F-3D3F-055C-BDBE-379675B48FC8&_=701766504 HTTP/1.1 
Host: create.leadid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 36708
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             3.213.164.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:05 GMT
server: nginx
set-cookie: rgisanonymous=false; expires=Sun, 25-Jun-2023 05:43:05 GMT; Max-Age=2592000; path=/ rguserid=fdb92670-d9d1-4fd9-a032-29fd1a1d1566; expires=Sun, 25-Jun-2023 05:43:05 GMT; Max-Age=2592000; path=/ rguuid=true; expires=Sun, 25-Jun-2023 05:43:05 GMT; Max-Age=2592000; path=/ rgisanonymous=true; expires=Sun, 25-Jun-2023 05:43:05 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2


                                        
                                            GET /bootstrap/4.0.0-beta.2/js/bootstrap.min.js HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             104.18.11.207
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 26 May 2023 05:43:01 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:03 GMT
cdn-cachedat: 2021-04-23 06:28:09
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: a9ac53c2137aaf1cc3a74aff1812514f
cdn-cache: HIT
cf-cache-status: HIT
age: 1653703
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7cd3b2b7ee09b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text, with very long lines (50277)
Size:   50564
Md5:    46b549bdc90920f18a911f186b9dd75c
Sha1:   3c639c4af5c036a6ee364215bd12c0b12937827d
Sha256: 1886bc561dec7c44a7541d82377ad81a40ff32496f32ad259884f0790c44d6a5
                                        
                                            POST /2.11.9/GenerateToken?msn=1&pid=760bb20e-b797-4048-82f0-79fb6d3a52d0&_=701766499 HTTP/1.1 
Host: create.leadid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 252
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             3.213.164.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:02 GMT
server: nginx
set-cookie: rgisanonymous=false; expires=Sun, 25-Jun-2023 05:43:02 GMT; Max-Age=2592000; path=/ rguserid=5b5ccb9e-d3a1-4981-bb3d-29a6e0026aa9; expires=Sun, 25-Jun-2023 05:43:02 GMT; Max-Age=2592000; path=/ rguuid=true; expires=Sun, 25-Jun-2023 05:43:02 GMT; Max-Age=2592000; path=/ rgisanonymous=true; expires=Sun, 25-Jun-2023 05:43:02 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   36
Md5:    3bbe382f7269f14cf250da68c34ff207
Sha1:   1c516be3239029dcdf309228df7efd28f0190cb2
Sha256: 1af06bd13caf4563de20f06fb3214e45ba2ecce29df0f4b45236781c3afe5a31
                                        
                                            GET /css?family=Playball HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 May 2023 05:43:01 GMT
date: Fri, 26 May 2023 05:43:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text, with very long lines (1143), with no line terminators
Size:   1119
Md5:    4558881dd58a60ba1cae859ea09e699d
Sha1:   282d99ee31a0b503f55554e277569e26b4affcea
Sha256: a65f048c56dc98c4be21a9774c54e264bd1baea587d2a7f775e193cb1e6b9561
                                        
                                            GET /font-awesome/3.2.1/css/font-awesome.min.css HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             104.18.11.207
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Fri, 26 May 2023 05:43:01 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:51 GMT
cdn-cachedat: 08/03/2021 16:46:11
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: 0a8c57b841d86b22613591e267b8dfd1
cdn-cache: HIT
cf-cache-status: HIT
age: 30526103
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7cd3b2b7ddfbb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text, with very long lines (668)
Size:   22084
Md5:    7fbe76cdac6093784895bb4989203e5a
Sha1:   68e2602c02181b61eebc9e1dccb0a38377fa5df7
Sha256: 326b994ec59c7334f52211fbd5aa909a36b98d1717cb798bfcd3af8d4cbdb6ca
                                        
                                            POST /certs/d1da8e3df12da18870a92e41fc983107a726b62b/snapshot HTTP/1.1 
Host: api.trustedform.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 24903
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             35.175.169.146
HTTP/2 204 No Content
                                            
date: Fri, 26 May 2023 05:43:04 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers:
cache-control: max-age=0, private, must-revalidate
server: Cowboy
X-Firefox-Spdy: h2


                                        
                                            GET /campaign/3cced9a6-4a67-d637-acdc-ccf79b4a5210.js?snippet_version=2 HTTP/1.1 
Host: create.lidstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             104.22.38.182
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Fri, 26 May 2023 05:43:02 GMT
x-amz-id-2: kVBGEAUx47lxyuJZOhYviXpJGIkiVbmk+c6uPb89kAC50DamnXpsljZDC8CG/J9QyocC7LR0AvI=
x-amz-request-id: N4537WQ29D95J6QB
x-amz-replication-status: COMPLETED
last-modified: Fri, 12 Nov 2021 00:55:16 GMT
etag: W/"97495a102c98049f30e62264b1eb50f5"
cache-control: max-age=1800
x-amz-version-id: StKcIVmHluaEF1AzrOc3qrEmwMpZOgwG
cf-cache-status: HIT
age: 264
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cd3b2bffa2e2e03-ARN
content-encoding: gzip
X-Firefox-Spdy: h2


                                        
                                            GET /iframe.html?token=595E8A8F-3D3F-055C-BDBE-379675B48FC8&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=3CCED9A6-4A67-D637-ACDC-CCF79B4A5210&lac=FCB958C1-1AC9-561E-1E7C-7EB79158EEC4 HTTP/1.1 
Host: d2m2wsoho8qq12.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             54.230.245.201
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 18 Apr 2023 16:14:44 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Encoding: gzip
Date: Fri, 26 May 2023 05:21:28 GMT
ETag: W/"643ec1f4-dbb"
X-Cache: Hit from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: n2g4zHLhygm8cKhnZjCN-z8tXpIaCPqbrooMh3eDJXwrmyw-8_fCWw==
Age: 1372



--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3675), with no line terminators
Size:   3515
Md5:    f296cf3fca2786c12a670712ef7f00bc
Sha1:   da1b0e716af4460dcf59ade38450cb62798954d1
Sha256: eabbab0c6023ae05e66d758837fa85258b724f04781c69ce36225c586a0c8db7
                                        
                                            GET /iframe.html?token=595E8A8F-3D3F-055C-BDBE-379675B48FC8&apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.11.9&lck=3CCED9A6-4A67-D637-ACDC-CCF79B4A5210&lac=FCB958C1-1AC9-561E-1E7C-7EB79158EEC4 HTTP/1.1 
Host: deviceid.trueleadid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2m2wsoho8qq12.cloudfront.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             3.231.15.165
HTTP/2 200 OK
content-type: text/html
                                            
date: Fri, 26 May 2023 05:43:03 GMT
server: nginx
last-modified: Tue, 23 May 2023 16:17:22 GMT
etag: W/"646ce712-1049"
expires: Sat, 27 May 2023 05:43:03 GMT
p3p: CP="NOI DSP COR NID CUR ADM DEV OUR BUS"
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4323), with no line terminators
Size:   4169
Md5:    27a57862137bf0b580930f288703c507
Sha1:   20114057bbb1f8a2ca6f1b6a2d81fe7f2b75c64a
Sha256: b0019d4447d91be93f68b8fb233b8fcccc542e3dffc16d4dc9c9f71bc9704550
                                        
                                            GET /font-awesome/3.2.1/css/font-awesome-ie7.min.css HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             104.18.11.207
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Fri, 26 May 2023 05:43:01 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4efc20143a3957f447ceeaa53695ceb6"
last-modified: Mon, 25 Jan 2021 22:04:51 GMT
cdn-cachedat: 01/13/2023 02:30:37
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 863
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 05635be0def1161d8a441b8721c5c921
cdn-cache: HIT
cf-cache-status: HIT
age: 1456664
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7cd3b2b7ee00b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text
Size:   37782
Md5:    4efc20143a3957f447ceeaa53695ceb6
Sha1:   d66b7374b5dd6259dfd5c4eb682925305f6716d4
Sha256: a7708968e861410bc255dd2a9c9d04b82303bd6a7e4e1f4d2acbb0488cf318d0
                                        
                                            POST /2.11.9/SaveDom?msn=2&pid=760bb20e-b797-4048-82f0-79fb6d3a52d0&token=595E8A8F-3D3F-055C-BDBE-379675B48FC8&_=701766500 HTTP/1.1 
Host: create.leadid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 496
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             3.213.164.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:03 GMT
server: nginx
set-cookie: rgisanonymous=false; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rguserid=c64b7a35-2a06-4774-9e07-ee05c75ca71f; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rguuid=true; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rgisanonymous=true; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2


                                        
                                            GET /2.11.9/SaveDeviceId.js?lac=FCB958C1-1AC9-561E-1E7C-7EB79158EEC4&lck=3CCED9A6-4A67-D637-ACDC-CCF79B4A5210&methods=48&token=595E8A8F-3D3F-055C-BDBE-379675B48FC8&uuid=d469252a9e9a46538ae538e74a3113ab HTTP/1.1 
Host: create.leadid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://deviceid.trueleadid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             3.213.164.48
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:03 GMT
server: nginx
set-cookie: rgisanonymous=false; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rguserid=728cca1c-3a1b-4522-b22d-fc0b4fa93dae; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rguuid=true; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/ rgisanonymous=true; expires=Sun, 25-Jun-2023 05:43:03 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2


                                        
                                            POST /2.11.9/Snap?msn=5&pid=760bb20e-b797-4048-82f0-79fb6d3a52d0&token=595E8A8F-3D3F-055C-BDBE-379675B48FC8&_=701766503 HTTP/1.1 
Host: create.leadid.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 110613
Origin: https://smoothreward.com
DNT: 1
Connection: keep-alive
Referer: https://smoothreward.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             3.213.164.48
HTTP/2 200 OK
content-type: text/plain;charset=UTF-8
                                            
date: Fri, 26 May 2023 05:43:05 GMT
server: nginx
set-cookie: rgisanonymous=false; expires=Sun, 25-Jun-2023 05:43:05 GMT; Max-Age=2592000; path=/ rguserid=df082033-ba31-4cac-97e1-5e8effc5ac1c; expires=Sun, 25-Jun-2023 05:43:05 GMT; Max-Age=2592000; path=/ rguuid=true; expires=Sun, 25-Jun-2023 05:43:05 GMT; Max-Age=2592000; path=/ rgisanonymous=true; expires=Sun, 25-Jun-2023 05:43:05 GMT; Max-Age=2592000; path=/
cache-control: no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type
access-control-max-age: 1728000
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2