continuetosite.com/go/eadd2f18-8dc7-40c5-a246-b0f556936dee
302 Found 496 B URL HTTP/1.1 continuetosite.com/go/eadd2f18-8dc7-40c5-a246-b0f556936dee
IP
File type HTML document, ASCII text, with very long lines (496), with no line terminators
Hash 3ed4b0508b93bfddf50e21690cd175fe
c7a332c2582a2e1e0c59e05630b3e16bfd0b5861
2b83d16e06e6519cd125f92423e533da06c083a72f5549102f458824a5af3099
Analyzer Verdict Alert fortinet Phishing
GET /go/eadd2f18-8dc7-40c5-a246-b0f556936dee HTTP/1.1
Host: continuetosite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: openresty
Date: Sun, 26 Mar 2023 00:10:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 496
Connection: keep-alive
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
Access-Control-Allow-Origin: *
Location: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Set-Cookie: bemob-uniq-visit:eadd2f18-8dc7-40c5-a246-b0f556936dee=1; Domain=continuetosite.com; Path=/; Expires=Mon, 27 Mar 2023 00:10:10 GMT; HttpOnly
bemob-rotation:eadd2f18-8dc7-40c5-a246-b0f556936dee:random:0cdbc68d44d7a9cfa2cff9ae21017fa2=0-0-0; Domain=continuetosite.com; Path=/; Expires=Mon, 27 Mar 2023 00:10:10 GMT; HttpOnly
bemob-track-url=https%3A%2F%2Fmyrealgift.xyz%2F1%2Fprizewheel%2Fiphone13%2Fpt%2Findex.html%3Fdomain%3Dcontinuetosite.com%26brand%3D%26bemobdata%3Dc%253Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%253D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%253D0..b%253D0..ts%253D1679789410389; Domain=continuetosite.com; Path=/; Expires=Mon, 27 Mar 2023 00:10:10 GMT; HttpOnly
Vary: Accept
X-Response-Time: 34.594ms
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8872
Expires: Sun, 26 Mar 2023 02:38:02 GMT
Date: Sun, 26 Mar 2023 00:10:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10911
Expires: Sun, 26 Mar 2023 03:12:01 GMT
Date: Sun, 26 Mar 2023 00:10:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 23:15:30 GMT
content-type: application/json
age: 3280
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9bb70197d53617b5e6889b890dd2ae26
f3e9b8a743de494529baf2d078a622539f965307
a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2589
Expires: Sun, 26 Mar 2023 00:53:19 GMT
Date: Sun, 26 Mar 2023 00:10:10 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: T6X5ko5fjbb3LfwqGcFOgK150xHe1+Z55ehF3rkFVSxEL3JUkh1caQ0Ezd8D+OBAZS1Elhr80uU=
x-amz-request-id: EW2NV9HH3P69MMAE
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 23:55:06 GMT
age: 904
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 26 Mar 2023 00:10:10 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP
Hash 8d233b482932361037021fb5ba6fda62
c640d5357dc90f7f27affbf36d4ed7835efe3621
ac67053d1de15d3407b11be827a82a6920bc9401917cce6ba9c599c569823240
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171915
Date: Sun, 26 Mar 2023 00:10:10 GMT
Etag: "641f89ed-1d7"
Expires: Mon, 27 Mar 2023 23:55:25 GMT
Last-Modified: Sat, 25 Mar 2023 23:55:25 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 27s1KRd3AQ7E0q2r6O70rV3tHThWQq-DhoN1YAbSaeqaeR4YbM9dqw==
myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
200 OK 4.1 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1216)
Hash dc5442586b95345b7bd968f5b36f4320
3e281e4824c431774a925fd0669b5766a6444f81
b4065a6e2779e5a616239632408e227b6ee85c6aa19e6eaa6c39f5c3cb9fa564
GET /1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389 HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sat, 25 Mar 2023 20:26:53 GMT
etag: W/"15056ec65b77f95f9a887ca6183877ad"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MZRHDZAxG-ljOP_1UMBUWuGFcjGgoVcQagxnyQjdlgmQ4gSk0jpjbA==
age: 13398
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/notification.png
200 OK 449 B URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/notification.png
IP
File type PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data
Hash bd5203f2cc9e7a9125e4575e029541b0
9fa565ab2f4b55da4735b79e529562252b3c9afe
db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f
GET /1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/notification.png HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 449
last-modified: Wed, 15 Mar 2023 09:05:11 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 20:26:54 GMT
etag: "bd5203f2cc9e7a9125e4575e029541b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S2AX6Lyk7DcBFfVAl7IRaJXF_Ca0RLHVhZPMKosVA2-ItjmAqH_nEw==
age: 13398
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/js/app.js?id=d5f25c7b0bcb6df904a3
200 OK 977 B URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/js/app.js?id=d5f25c7b0bcb6df904a3
IP
File type ASCII text, with very long lines (977), with no line terminators
Hash d5f25c7b0bcb6df904a36614b5441fae
318c3d74f655da3f44f256ed28e000dda3a54111
80bf387149a3863d890de5f3b15356b90f92187c10edbac0674fc54de499e8a8
Analyzer Verdict Alert fortinet Phishing
GET /1/prizewheel/iphone13/pt/js/app.js?id=d5f25c7b0bcb6df904a3 HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 977
date: Sat, 25 Mar 2023 20:16:30 GMT
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
etag: "d5f25c7b0bcb6df904a36614b5441fae"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fDLCXik_FaJ09-jlq2eSgvuqv22WNkdLbbJp6Qh1YY8PftHUwShrtA==
age: 14022
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/css/app.css?id=c588c17324f2be0e0ec9
200 OK 33 B URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/css/app.css?id=c588c17324f2be0e0ec9
IP
File type ASCII text, with no line terminators
Hash c588c17324f2be0e0ec90a18f39e7d7c
69d360eddd15f527aac7f7e610346517732b7770
b83e8830b6b2f1253a78f90191cf1087e8fd7638831fd4c1376a7a6029297240
Analyzer Verdict Alert fortinet Phishing
GET /1/prizewheel/iphone13/pt/css/app.css?id=c588c17324f2be0e0ec9 HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 33
last-modified: Wed, 15 Mar 2023 09:05:11 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 20:26:54 GMT
etag: "c588c17324f2be0e0ec90a18f39e7d7c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m1-CESpBmyXfMHgeHWcRUT_N6t5G-cVKWiQ9igneqaCNx4eNDEx3CA==
age: 13398
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/prizewheel_spinner.jpg
200 OK 32 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/prizewheel_spinner.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3\012- data
Hash d4655cba21d806e849eed4e4119fbe1a
6453039d85005643e9d65074ca022f63b5d47cdd
90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7
GET /1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32496
last-modified: Wed, 15 Mar 2023 09:05:11 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 20:26:56 GMT
etag: "d4655cba21d806e849eed4e4119fbe1a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qrZHab61sd25B0dFuAOPSKDtCiIzvZA31etkjzavoZvE7ucKoBfeBQ==
age: 13396
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/loader.gif
200 OK 5.1 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/loader.gif
IP
File type GIF image data, version 89a, 50 x 50\012- data
Hash ed786659a534e0d183c09a90c50abc9d
a6c3d90bfaa86a7cda490bc5d04c8939c31a414e
cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97
GET /1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/loader.gif HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 5083
last-modified: Wed, 15 Mar 2023 09:05:11 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 20:26:54 GMT
etag: "ed786659a534e0d183c09a90c50abc9d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZcooTTr-OD9AKq_Ve1WCQFzxFpVLvbmRlSaC3KeNCgpGPKOKUXzJvA==
age: 13398
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444
200 OK 1.5 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444
IP
File type ASCII text, with very long lines (3495), with no line terminators
Hash 0b4e655d625887dcb85212ded788a7b4
8f73c16cab60d58075e991adca223ed88ad28b94
40415c67843b49aea9cc8e8813847e7fd068ed82e1a96df244b5e265f42eaed3
Analyzer Verdict Alert fortinet Phishing
GET /1/prizewheel/iphone13/pt/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sat, 25 Mar 2023 20:26:54 GMT
etag: W/"cd41123a11e97e0f2444b57d180631a0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rGfbz5YjBv_ktBUacgCMixasSvnruXTfQM5bs2pwSFwOiGSIKt0Xbw==
age: 13398
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/female/6@0.25x.jpg
200 OK 2.9 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/female/6@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash ec3ed635f252fdb394d3f82d331d002a
8c87b61cd87f3f11f490293e7af3133b37535813
2a5922fd5c4b7fe191b1e97f675da62a3913286abfaf8c3b9aa94b27f9c791a8
GET /1/prizewheel/iphone13/pt/img/profiles/latin/female/6@0.25x.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2892
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 20:26:56 GMT
etag: "ec3ed635f252fdb394d3f82d331d002a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: frUKF0EAsfmwAvA0TfcdIdZyU1S59XwqGl1FGslyJWefrl9Cs22X2Q==
age: 13396
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/male/9@0.25x.jpg
200 OK 2.5 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/male/9@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash bcb23efbd2af0f7b987a3fb1371fb2b9
a4e569ab554784748cfbd3d76b6eeba481f05c01
23a399abbbf589b9e2007712d9ee331dc0b459b8e3b53c12d20c41a16fe04c2e
GET /1/prizewheel/iphone13/pt/img/profiles/latin/male/9@0.25x.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2452
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 20:26:56 GMT
etag: "bcb23efbd2af0f7b987a3fb1371fb2b9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3Fe5xg28cLmwkQ-vvIE50neo_pwkof2mqqifRqozm5zNhV7xCm9_BA==
age: 13396
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/female/1@0.25x.jpg
200 OK 2.2 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/female/1@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 49df55afe4321486969adca56f2f6204
0c106c9dfb10e0c4380ab48329a59c5597bca337
553a4d2a98ec5772fac31323c8cc164c1ce4db811c1f3224d2dc11fd1d67e60b
GET /1/prizewheel/iphone13/pt/img/profiles/latin/female/1@0.25x.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2200
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 20:26:56 GMT
etag: "49df55afe4321486969adca56f2f6204"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TOvBMllhh2-daib3Lgl0VZt5gQakb6p9IjC2sG4fLkoRPBTBAE1xGQ==
age: 13396
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/male/2@0.25x.jpg
200 OK 2.3 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/male/2@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash bc8e122fbaa882374705d2ea5ce9202a
f13d965e88d711f0a3856ecb90edf95b51ed1d43
dc57d0d848c412a4ad161616852394cca0f028ecaed15d759d7ded5b92bd956a
GET /1/prizewheel/iphone13/pt/img/profiles/latin/male/2@0.25x.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2338
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sat, 25 Mar 2023 20:26:56 GMT
etag: "bc8e122fbaa882374705d2ea5ce9202a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ir68tEfotXLJDIJOmgDz1zq-w9udP9Z9Xl4PfnEoTkbKUBoe7LASiQ==
age: 13396
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbb4d742736e57e4ddb17769ca2d4c81
d14861a54e444b01c6fd83ae9f960e7bad043d1a
51cb00e3030a6602f772d998cd737fb44fff6f24b6e4eef03b5d9f77ff346536
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51CB00E3030A6602F772D998CD737FB44FFF6F24B6E4EEF03B5D9F77FF346536"
Last-Modified: Fri, 24 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8511
Expires: Sun, 26 Mar 2023 02:32:02 GMT
Date: Sun, 26 Mar 2023 00:10:11 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LIOo7AcXVhAcfnA1J4YCrQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fUoM27/WJ0gtdQtiIKLQHy5Cpr4=
laugoust.com/zone?&pub=0&zone_id=5653883&is_mobile=false&domain=myrealgift.xyz&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
200 OK 0 B URL HTTP/2 laugoust.com/zone?&pub=0&zone_id=5653883&is_mobile=false&domain=myrealgift.xyz&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=5653883&is_mobile=false&domain=myrealgift.xyz&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myrealgift.xyz
Connection: keep-alive
Referer: https://myrealgift.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Mar 2023 00:10:11 GMT
content-length: 0
x-trace-id: 7b0d6f0313e4339e3693ee1f8a372563
access-control-allow-origin: https://myrealgift.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/prizes/iphone-12-pro-max/default@0.5x.png
200 OK 32 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/prizes/iphone-12-pro-max/default@0.5x.png
IP
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash c562f63263ffff2688791c38014b36bc
59fe19592cb3f6a2709c418026f0a1ddb12c1314
c331ce815fcd0ed99bc592c082eed6e51efd0f107d2ae967021d0273def59ae8
GET /1/prizewheel/iphone13/pt/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 32266
date: Sun, 26 Mar 2023 00:10:12 GMT
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
etag: "c562f63263ffff2688791c38014b36bc"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NLb65nmjwB9VfE4MxPVEZNLJRBOSgCcqB1cvMOUbW7S_G7lpCcw0eQ==
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/caucasian/female/5@0.25x.jpg
200 OK 2.6 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/caucasian/female/5@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 5e930fa2efb8142b942712a603c0d112
82a6ab6fd202a0e973b4e83861cb9889294289cd
b15d6a868ff22d57beec85074fbac2b0bf4d94aba82586f91e28f1843bec2482
GET /1/prizewheel/iphone13/pt/img/profiles/caucasian/female/5@0.25x.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2607
date: Sun, 26 Mar 2023 00:10:12 GMT
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
etag: "5e930fa2efb8142b942712a603c0d112"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DEmYH2yoDuJuBSRNh7CrYARr6yrwicUnMjMLH2yoewrY9i3i5FQzzQ==
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/male/3@0.25x.jpg
200 OK 2.9 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/male/3@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash b0ec21b872959a3b18728d0e1a95a55d
55b0644d77e3b5668bbeb80ed79a599ca09eaf03
1bffa3f9094544d064b94b9a286d8c8fa619315d69f137d6418501e826c01504
GET /1/prizewheel/iphone13/pt/img/profiles/latin/male/3@0.25x.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2855
date: Sun, 26 Mar 2023 00:10:12 GMT
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
etag: "b0ec21b872959a3b18728d0e1a95a55d"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7txs8j7HpHOzx5Csfau7QlmhWVE4s29J0fRBEiX-IoTWGl8rpGnZYw==
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/caucasian/male/10@0.25x.jpg
200 OK 2.7 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/caucasian/male/10@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 1112732142f99bb6c1631b89e0d3ab7d
23f5c0c1a491135b6e2e16f1f649773ac95d7bdf
fb6ecfa12b19fa686f2e8138fe5be303d5e08f270c995e2bc287c33b62faa503
GET /1/prizewheel/iphone13/pt/img/profiles/caucasian/male/10@0.25x.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2736
date: Sun, 26 Mar 2023 00:10:12 GMT
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
etag: "1112732142f99bb6c1631b89e0d3ab7d"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4noAfegLUAOh4-v3IaA18vuPe6QCumyTWQC_mbe-Iy5dp_ggs3J0cg==
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/prizewheel_static.png
200 OK 3.4 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/prizewheel_static.png
IP
File type PNG image data, 1002 x 1002, 4-bit colormap, non-interlaced\012- data
Hash dc484e0043b5ff6191b1880c8779863c
a5b67e3dff3dea3940eed090431aecbb36611b1d
30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6
GET /1/prizewheel/iphone13/pt/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3370
date: Sun, 26 Mar 2023 00:10:12 GMT
last-modified: Wed, 15 Mar 2023 09:05:11 GMT
etag: "dc484e0043b5ff6191b1880c8779863c"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fokMatjlC87gyW9pF7AAU5pCoCtnSPPG7qZwl36pPXtN52GBnKoxCQ==
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/female/3@0.25x.jpg
200 OK 3.0 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/profiles/latin/female/3@0.25x.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data
Hash 2166c5a27e46d0396d0a839f231077aa
3e39f6e60e04265d0141c24fd3fe9cb6492c4620
f655466cadcfbaf507c862671c618e5279162199c690ee414251b220a19f9cf2
GET /1/prizewheel/iphone13/pt/img/profiles/latin/female/3@0.25x.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2974
date: Sun, 26 Mar 2023 00:10:12 GMT
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
etag: "2166c5a27e46d0396d0a839f231077aa"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 65Abr81BadKZT4oZVDOKua6rtx8kHG3iUd1Zi2Gcbbt_Uv9aV6wlrQ==
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/prizes/iphone-12-pro-max/proof.jpg
200 OK 23 kB URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/prizes/iphone-12-pro-max/proof.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 339x450, components 3\012- data
Hash 029d38095e06ced0688fd67a58e70781
b5bdaddeb39b947c35f883f001f34dd163bcb362
5e41534f027f676ce89db3b87319ffbdc1a1e7515e379f80f476e0989fa4bcc1
GET /1/prizewheel/iphone13/pt/img/prizes/iphone-12-pro-max/proof.jpg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 23152
date: Sun, 26 Mar 2023 00:10:12 GMT
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
etag: "029d38095e06ced0688fd67a58e70781"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5HnVo-TBK8meCKHkMAdPSvNQpTY8NP-NS38lPgjyDlcmLquf6Kt3wA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4835
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sun, 26 Mar 2023 00:10:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4835
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sun, 26 Mar 2023 00:10:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1612ee74-a49e-4591-8ef6-d0981e1c9d56.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1612ee74-a49e-4591-8ef6-d0981e1c9d56.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a62b9bc5004705ab524a35333723e69
5ef3ffbfa1ffeba8ba3ef32c4467aa67bce4a1cd
cf2f57985087242a10bbaf4fb1bb1a0e76c7bacdb60ee75b2ba7086139a310b5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1612ee74-a49e-4591-8ef6-d0981e1c9d56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6932
x-amzn-requestid: 9cf60a06-c1d9-413f-9c9f-04bfb9e003e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CU2ZbH43IAMF-gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e9dd5-2f79970567d69dab2cd2f4b8;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 07:08:05 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 8x07trT46MfCHlxn1F2Ir5rt8OAWzPYdaNnxNqLcff6S5kqGB6y6SQ==
via: 1.1 8731d2a1a7d15f67b588bf58f652f9f0.cloudfront.net (CloudFront), 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 07:25:23 GMT
age: 60290
etag: "5ef3ffbfa1ffeba8ba3ef32c4467aa67bce4a1cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
laugoust.com/pfe/current/micro.tag.min.js?z=5653883&sw=/sw-check-permissions-fab86.js
200 OK 45 kB URL HTTP/2 laugoust.com/pfe/current/micro.tag.min.js?z=5653883&sw=/sw-check-permissions-fab86.js
IP
Hash b01cc5470265cc6005b42d2f885368ae
f0839d14f68a1d4db50930fc78ec7e24af070b44
6d07bb2dacadd18dd1628c1d3ecbe199abab7c1b022020131294cc67b64bda5d
GET /pfe/current/micro.tag.min.js?z=5653883&sw=/sw-check-permissions-fab86.js HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 26 Mar 2023 00:10:11 GMT
content-type: application/javascript
last-modified: Thu, 16 Mar 2023 15:32:57 GMT
etag: W/"641336a9-a161"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1ec08d4bd079a92161fc80f41281b5a9
bf61369962342cce85de8f48942b4b150fd2721e
8a8ed12c31d89d71c3cb88f0813ded83939529206461e917dcb0b8bc11abdda4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3fb4d16c-eef2-49cc-ac24-b125a7d6d9e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3589
x-amzn-requestid: 9c09af43-79e8-4734-b28b-4194e0bb1e4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1uyE2joAMF50g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6991-7607d33f6301182b591c56e8;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:21 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Olik0rOopNpu03_GQWvvGeuS0D579nAdtuk9RGWUQSopMavKHDn1cQ==
via: 1.1 46673955829b59a6da0ab071e0b7fbea.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:53:15 GMT
age: 8218
etag: "bf61369962342cce85de8f48942b4b150fd2721e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ncagzm12kJaHQtYhhjUUhcfXVfbwMdonoNYqpK-QXEmLfyyENgFnFA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 08:51:06 GMT
age: 55147
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e924839a6364def37d8e9d20af3f5999
42e3c97cb72a824d50de5b49e92731a7678c4e73
64725edfecba86737c10dbbc9c70faec28405bb36c565e899889fdaa73979694
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6976
x-amzn-requestid: dd142563-f3de-4390-816b-192fc44c480d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHjMIAMF9xA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-5dee56692bbe2f35034c9178;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: ZVnX7AJMV_qcEeF6TG2tsNkiw3kUbCI6rskIb8IPuw-8VMg9raFUjA==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:51:25 GMT
age: 8328
etag: "42e3c97cb72a824d50de5b49e92731a7678c4e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fcbc03b-3146-4d3b-898e-c53b92f7b7a6.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fcbc03b-3146-4d3b-898e-c53b92f7b7a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 908bd7a6c220345e72fa664f871424c4
61a5d3f11e85d5fd77192701c305cb8651aa6395
9531f5b25cab1030aa579aa9f3b369ecb9daf0b929573897c6516520c06084a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fcbc03b-3146-4d3b-898e-c53b92f7b7a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11100
x-amzn-requestid: 3021b51a-674d-45d7-9939-9257330c0dbc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1hQFs1oAMFb0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f693a-0200a29207f6a3f5074c3cf1;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:35:54 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: jlErPpMe9fQqKvMYIXUDGkEXT-hFUt6veP7Gj8byX1ktNmxSRD_Ozg==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:50:36 GMT
age: 8377
etag: "61a5d3f11e85d5fd77192701c305cb8651aa6395"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/js/landers/prizewheel-fb/app.js?id=9ce67e774d7587d76bf9
200 OK 0 B URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/js/landers/prizewheel-fb/app.js?id=9ce67e774d7587d76bf9
IP
GET /1/prizewheel/iphone13/pt/js/landers/prizewheel-fb/app.js?id=9ce67e774d7587d76bf9 HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 15 Mar 2023 09:05:12 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sat, 25 Mar 2023 20:26:54 GMT
etag: W/"3e7bf4c42d8d685fbce1149971416ef2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cCJ0I98AXE6vJWkTyPtW07MNcx9BqrAwZtJ2gFUm6UmfI1Bts3_LOA==
age: 13398
X-Firefox-Spdy: h2
myrealgift.xyz/1/prizewheel/iphone13/pt/img/fb-like.svg
200 OK 0 B URL HTTP/2 myrealgift.xyz/1/prizewheel/iphone13/pt/img/fb-like.svg
IP
Analyzer Verdict Alert fortinet Phishing
GET /1/prizewheel/iphone13/pt/img/fb-like.svg HTTP/1.1
Host: myrealgift.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myrealgift.xyz/1/prizewheel/iphone13/pt/index.html?domain=continuetosite.com&brand=&bemobdata=c%3Deadd2f18-8dc7-40c5-a246-b0f556936dee..l%3D2c31ab5f-799f-445a-bab9-fed46c82fd9d..a%3D0..b%3D0..ts%3D1679789410389
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Wed, 15 Mar 2023 09:05:11 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sat, 25 Mar 2023 20:26:56 GMT
etag: W/"765203989756e91925e8f947e660b644"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: To2Elp3ieMp4NCrcQGeELfN2aghvd3FvOw7NANQw03dZkWp8edMGdg==
age: 13396
X-Firefox-Spdy: h2
3.70.16.242
23.36.77.32
54.230.80.227
139.45.197.250