cn47e.bemobtrk.com/go/da27d233-42bd-4b6b-aa9b-aab36f5b498c
302 Found 440 B URL HTTP/1.1 cn47e.bemobtrk.com/go/da27d233-42bd-4b6b-aa9b-aab36f5b498c
IP
File type HTML document, ASCII text, with very long lines (440), with no line terminators
Hash d1a5599ed7b6f2cd22848340fbb2d108
8c39b838b95e394c09bb9a5064122386fc324c7d
d0e24d4e84c73ed680532572cb248e478b6a4413f9f2add468b6339c34e94458
GET /go/da27d233-42bd-4b6b-aa9b-aab36f5b498c HTTP/1.1
Host: cn47e.bemobtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: openresty
Date: Mon, 06 Feb 2023 22:38:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 440
Connection: keep-alive
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
Access-Control-Allow-Origin: *
Location: https://dailyrew23.info/RM/Senegal?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Set-Cookie: bemob-uniq-visit:da27d233-42bd-4b6b-aa9b-aab36f5b498c=1; Domain=cn47e.bemobtrk.com; Path=/; Expires=Tue, 07 Feb 2023 22:38:59 GMT; HttpOnly
bemob-rotation:da27d233-42bd-4b6b-aa9b-aab36f5b498c:random:9ea1092afb15503390894dcb20da87d5=0-0-0; Domain=cn47e.bemobtrk.com; Path=/; Expires=Tue, 07 Feb 2023 22:38:59 GMT; HttpOnly
bemob-track-url=https%3A%2F%2Fdailyrew23.info%2FRM%2FSenegal%3Fdevicemodel%3D%26browser%3DFirefox%26ip%3D91.90.42.154%26bemobdata%3Dc%253Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%253D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%253D0..b%253D0; Domain=cn47e.bemobtrk.com; Path=/; Expires=Tue, 07 Feb 2023 22:38:59 GMT; HttpOnly
Vary: Accept
X-Response-Time: 10.991ms
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2197
Expires: Mon, 06 Feb 2023 23:15:37 GMT
Date: Mon, 06 Feb 2023 22:39:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2695
Expires: Mon, 06 Feb 2023 23:23:55 GMT
Date: Mon, 06 Feb 2023 22:39:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 22:34:06 GMT
content-type: application/json
age: 294
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10265
Expires: Tue, 07 Feb 2023 01:30:05 GMT
Date: Mon, 06 Feb 2023 22:39:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: u2D3czbirRxQRCmdbP+iZCDp7T4qJPEQtVXDoGEOdqvwql1Z1EYKrXEWfM8iAEy6Gl/epNh1jLI=
x-amz-request-id: 7MZ1JZB8J3R2JG7Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 22:35:17 GMT
age: 223
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 22:39:00 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 21:51:19 GMT
age: 2861
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12710
Expires: Tue, 07 Feb 2023 02:10:50 GMT
Date: Mon, 06 Feb 2023 22:39:00 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZDL0pwavTmIUx5iy7jf5/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5ffWBJlSgo3KrKEuerb5CwUQ7BA=
dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
200 OK 3.6 kB URL HTTP/2 dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
IP
ASN #61317 Ipxo Uk Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (306)
Hash f3884259cbcbf2e759d358bb6e48cb27
169ef4c7bf94ec385568c730d1e7972b143320bf
8a9e2986745c97816f122698f30537eac419d8617773883aa726958bce1f853e
GET /RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0 HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
etag: "44dc-63e17ee1-a125d;br"
last-modified: Mon, 06 Feb 2023 22:27:45 GMT
content-type: text/html
content-length: 3642
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gncss/bootstrap.min.css
200 OK 20 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gncss/bootstrap.min.css
IP
ASN #61317 Ipxo Uk Limited
File type ASCII text, with very long lines (65324)
Hash 4f020dd9c41e46664b4182791827111f
3ec63708a37c86f3472673e177c28fc1caebe9b4
427524e76c41b8013c9326ebacea93d955ad02b8dc17a66183e60dded6a4ab75
GET /RM/Senegal/gncss/bootstrap.min.css HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:01 GMT
etag: "2606e-63e17ef0-a1262;br"
last-modified: Mon, 06 Feb 2023 22:28:00 GMT
content-type: text/css
content-length: 20358
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gncss/gn.css
200 OK 2.1 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gncss/gn.css
IP
ASN #61317 Ipxo Uk Limited
File type ASCII text, with very long lines (366)
Hash 82fcf04a54136d1066d17afca6cf43c6
d2d8e10df3ee1ef9ff12af408fe830e638a76cef
43e6d492c5bf184ac86324eff3e4cc321bc8c9b53be64863cbdfcd150338a78e
GET /RM/Senegal/gncss/gn.css HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:01 GMT
etag: "2941-63e17eed-a1261;br"
last-modified: Mon, 06 Feb 2023 22:27:57 GMT
content-type: text/css
content-length: 2111
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gnjs/jquery.min.js
200 OK 30 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gnjs/jquery.min.js
IP
ASN #61317 Ipxo Uk Limited
File type ASCII text, with very long lines (65451)
Hash 0fcbafbb010c311c2b7bde481364887c
7e34927ca9c83bab9cb840ebe1bc25edcc22a80d
373625e40f243700b110e10732cb2e3a13714ef3b9b2ed6a8d6e451640e918ad
Analyzer Verdict Alert fortinet Phishing
GET /RM/Senegal/gnjs/jquery.min.js HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:01 GMT
etag: "1538f-63e17ef8-a1266;br"
last-modified: Mon, 06 Feb 2023 22:28:08 GMT
content-type: application/x-javascript
content-length: 29523
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gnjs/bootstrap.bundle.min.js
200 OK 21 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gnjs/bootstrap.bundle.min.js
IP
ASN #61317 Ipxo Uk Limited
File type ASCII text, with very long lines (65297)
Hash 92f65f79befc0455695c41c5ba5b295f
0059665531c88465fddd29d7be8b2cecc35aa0c8
5acebee56201b0f8c5edc67c7d00e772396883c0129bc4509cc14a8eaa9ac38c
Analyzer Verdict Alert fortinet Phishing
GET /RM/Senegal/gnjs/bootstrap.bundle.min.js HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:01 GMT
etag: "1332b-63e17ef7-a1265;br"
last-modified: Mon, 06 Feb 2023 22:28:07 GMT
content-type: application/x-javascript
content-length: 21222
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/g1.png
200 OK 2.4 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/g1.png
IP
ASN #61317 Ipxo Uk Limited
File type PNG image data, 216 x 122, 8-bit colormap, non-interlaced\012- data
Hash 8704100b3c75735e1887564754b530db
97e38c743e414ec78362e4be120074ffebbf68e8
47f7ba1b5c6a29cc01acf1941e3a6560f62303a0ca57d3a9a6ab22605088cacd
GET /RM/Senegal/gn-mg/g1.png HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:01 GMT
etag: "93a-63e17efe-a1268;;;"
last-modified: Mon, 06 Feb 2023 22:28:14 GMT
content-type: image/png
content-length: 2362
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5968
Expires: Tue, 07 Feb 2023 00:18:30 GMT
Date: Mon, 06 Feb 2023 22:39:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5968
Expires: Tue, 07 Feb 2023 00:18:30 GMT
Date: Mon, 06 Feb 2023 22:39:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5968
Expires: Tue, 07 Feb 2023 00:18:30 GMT
Date: Mon, 06 Feb 2023 22:39:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf292b03a5db7eb8e0660a518f41233c
8fa486cdecffff8a663da2df88227ee784c298a2
cfc5efb92068bdeeda5c95f9851213b14afa76776486d0493cf4c05b30453cf0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5634
x-amzn-requestid: 632886dc-5740-40ae-b91f-f0bc1578ac2e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpdrbGvaoAMF_4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0fe2-4e20757b045beab314bdf92e;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xCFj9HPjTNZgRqRW4qwDUe2duq7q24zyMZSuIa6Nw7QjeouM11_ziw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 15:41:08 GMT
age: 25074
etag: "8fa486cdecffff8a663da2df88227ee784c298a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 298eca3ae092fd28108db52acaa59545
ee865a4919befec21c73f7a1cf0c2405c34743b7
d490b601b1dc9e89392b902b7b7376815c81019ef53ab06aa27ed563600bb1a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4252883-1cf4-4e4a-98fa-fee2d1bd1a6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13371
x-amzn-requestid: 2fd56339-7b32-4058-8eea-8565cae3037c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f2opoHjGoAMFsMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63df54a3-5b0bd42e1e21d7d65ac7c7f1;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 07:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JsUVBJdjaEX5lknubVE44HzNtrl9gAxfQVmj1G6Wm1yaJ8gmmiOJKw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 10:42:23 GMT
age: 42999
etag: "ee865a4919befec21c73f7a1cf0c2405c34743b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75b0935816ca54d5d20a9fffa5531e0d
bd8374980c16b7d5a28e55b8bef2215713b1ebb2
4ab6f49d22d029681754b617001f93467d63035acdaf12905c2314cab77991af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13390
x-amzn-requestid: e7653b49-3160-42e3-8292-8ae32604f775
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc8KEoPoAMFrUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0eb4-68fd76a95ffa656318bedff6;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KaitXsesZ9mJducJ54ChzQGfb-2-hEN4W_QojGMKXYEji4xsjNdWCA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 09:06:57 GMT
age: 48725
etag: "bd8374980c16b7d5a28e55b8bef2215713b1ebb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F973cd606-df0d-4627-802f-ceb71e14ff3b.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F973cd606-df0d-4627-802f-ceb71e14ff3b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b421d78e6c5cd8197305af675c732c4
85860968c2b0275bab3835ed01538e2574ffde3e
5262a9cc5bfa4a7f9e70b357cde1829c7246a141eb138145619d9704bbc66e73
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F973cd606-df0d-4627-802f-ceb71e14ff3b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11675
x-amzn-requestid: 383039a1-7516-48f3-838e-836b0ccaecf6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fy6iyGpqoAMF0Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ddd7ab-7fb224275ffee8fe191c47c5;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 03:57:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pNnDWTaKFgaMVkRSYZfIJQKMYTHPuG8bxE6rI8KEW3EuJSxTaCnACw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:47:36 GMT
age: 85886
etag: "85860968c2b0275bab3835ed01538e2574ffde3e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 88178e0f623494e30ece4da4eed04d60
7f016d87157a577e4ad4e4cf6c854a0489f8571a
e5658ac599ca37e797637a596ca9b65c80c1053b2ce5dacc667ae3b8b1ce54a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09bdaec3-9afd-4cea-87ec-6adabc28a3e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6384
x-amzn-requestid: 5f91a438-31d9-42ca-96b4-71344cc736c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77IcE2-oAMFbZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e17235-1ce1ebfa4e9ae6053434c48d;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:33:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: li__CyiikZFRNF7c8_9Kbi18VJ39UzJiNgP9z141MCUFVPnYAEXPCg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 22:24:59 GMT
age: 843
etag: "7f016d87157a577e4ad4e4cf6c854a0489f8571a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59419fb1cf4689bed183d0e9a6aed782
47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a
e6009407bd61bee1ae16ec30ea5914be77c56ee65dfb30595b10a1cedc6798c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c86a61b-07c3-45f6-b564-e556eb788d04.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12682
x-amzn-requestid: d858d90a-b1ca-401c-8e00-8ccd9c0a7504
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f78mUEsfIAMFreg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1748e-2783de3e3de9c520246bf06e;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:43:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _D5bI_flPN8fUn6aTGqO76FRSDwwC379nkVCBptmZkALErIVFCZfpA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:19 GMT
age: 2623
etag: "47d4a4bb26fafff0c6aebfe3dc7ddfa4970f8e9a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 95a5f510f2e23c2313a0caf5f5eaa417
86b7aa8ba904a128db23fc1fdaf4f654120a7796
6f5d8b5beff337e77eacb3b353ce23b3cf9036a502fda552481c0634b6605e20
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F5D8B5BEFF337E77EACB3B353CE23B3CF9036A502FDA552481C0634B6605E20"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5685
Expires: Tue, 07 Feb 2023 00:13:47 GMT
Date: Mon, 06 Feb 2023 22:39:02 GMT
Connection: keep-alive
dailyrew23.info/RM/Senegal/gnjs/gn.js
200 OK 5.0 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gnjs/gn.js
IP
ASN #61317 Ipxo Uk Limited
File type ASCII text, with very long lines (16692)
Hash b49b071297cc766ee584439af5d5b1f4
2ef5548514f5a6fc5e5d1703db6570eb5b64e278
867414eff8c7d128d8ae8d52fe8c189043b358b12e06a955f388b2de6fe7980f
Analyzer Verdict Alert fortinet Phishing
GET /RM/Senegal/gnjs/gn.js HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:01 GMT
etag: "4135-63e17ef6-a1264;br"
last-modified: Mon, 06 Feb 2023 22:28:06 GMT
content-type: application/x-javascript
content-length: 4983
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn1.png
200 OK 67 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn1.png
IP
ASN #61317 Ipxo Uk Limited
File type PNG image data, 400 x 331, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a62ddc5329e434d6f72122031f74eb6
721165c462e89553da2909b170ca13c039841de1
e0799d607ee50389477d555a57a6777fb3d6d1d72714b8744cedb4b987bbe222
GET /RM/Senegal/gn-mg/gn1.png HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:01 GMT
etag: "1076d-63e17f01-a126a;;;"
last-modified: Mon, 06 Feb 2023 22:28:17 GMT
content-type: image/png
content-length: 67437
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn2.png
200 OK 4.9 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn2.png
IP
ASN #61317 Ipxo Uk Limited
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 837465e4eb81f290b74e857ae44104f2
87201e8ee79973724dd48212ed7454f2806b02fb
02dffb9903c1ae71c0f2b48fc15e33829ec46638bbea9794bd9ecc68c8206cbd
GET /RM/Senegal/gn-mg/gn2.png HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "12f3-63e17f00-a126b;;;"
last-modified: Mon, 06 Feb 2023 22:28:16 GMT
content-type: image/png
content-length: 4851
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
deefauph.com/zone?&pub=0&zone_id=5681109&is_mobile=false&domain=dailyrew23.info&var=&ymid=&var_3=&dsig=&action=prerequest
200 OK 0 B URL HTTP/2 deefauph.com/zone?&pub=0&zone_id=5681109&is_mobile=false&domain=dailyrew23.info&var=&ymid=&var_3=&dsig=&action=prerequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=5681109&is_mobile=false&domain=dailyrew23.info&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dailyrew23.info
Connection: keep-alive
Referer: https://dailyrew23.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 22:39:02 GMT
content-length: 0
x-trace-id: 5919f96176247efd4e684abdc0854eff
access-control-allow-origin: https://dailyrew23.info
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn.gif
200 OK 122 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn.gif
IP
ASN #61317 Ipxo Uk Limited
File type GIF image data, version 89a, 246 x 246\012- data
Size 122 kB (121587 bytes)
Hash 1f32223b3bcbe23d6efe15d914206440
1faa0c1e65002ca3880cb764be63abef5a3efac5
c0f27622e1c77dfe225b6e2637211c61861471c39e585461a5dc55017950e92a
GET /RM/Senegal/gn-mg/gn.gif HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "1daf3-63e17eff-a1269;;;"
last-modified: Mon, 06 Feb 2023 22:28:15 GMT
content-type: image/gif
content-length: 121587
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gnm.jpg
200 OK 35 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gnm.jpg
IP
ASN #61317 Ipxo Uk Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:21 17:53:11], baseline, precision 8, 300x142, components 3\012- data
Hash 07e6696f6fde833d6bc4c5a915c0ba67
8d2c7f56c32bbc5bf32c60f1aa82c3fd28f60cc1
0cccd66f0249c833d1d1d40c292c9535faea0d4e642b563652f6b1578d0472ee
GET /RM/Senegal/gn-mg/gnm.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "88c8-63e17f0c-a1273;;;"
last-modified: Mon, 06 Feb 2023 22:28:28 GMT
content-type: image/jpeg
content-length: 35016
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn4.jpg
200 OK 37 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn4.jpg
IP
ASN #61317 Ipxo Uk Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:21 17:53:11], baseline, precision 8, 300x142, components 3\012- data
Hash 53a6e83d8db4c5ce5f3b41891960a332
3b39ca79ad0580a5975ad1a32af70ab2378bd138
cdb2bc830febc33c742edb459e32b44ad3f18230ef926492cd182bce45ac9e47
GET /RM/Senegal/gn-mg/gn4.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "8fde-63e17f06-a126e;;;"
last-modified: Mon, 06 Feb 2023 22:28:22 GMT
content-type: image/jpeg
content-length: 36830
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn5.jpg
200 OK 31 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn5.jpg
IP
ASN #61317 Ipxo Uk Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9], baseline, precision 8, 90x81, components 3\012- data
Hash 07520f9a6c6d5a7af5b14083fee8e1a8
48dac12c255e18171476a0278c1e439c8e2f48f2
6cd5b4330bfa1f38b167961d70ebb58d2a6bd0b8aaa75755a64f388310a45b8a
GET /RM/Senegal/gn-mg/gn5.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "7982-63e17f05-a126d;;;"
last-modified: Mon, 06 Feb 2023 22:28:21 GMT
content-type: image/jpeg
content-length: 31106
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn6.jpg
200 OK 36 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn6.jpg
IP
ASN #61317 Ipxo Uk Limited
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:30 00:16:32], progressive, precision 8, 150x144, components 3\012- data
Hash 235166c1ccd7093b912b8737b3b144cf
dd62c68565d9a15b218d9ab1e34642a386589d1d
3e44bdc95b3e401a8ba95425bdfb19c3e69d4de46d0dd1563ed3f48a78854952
GET /RM/Senegal/gn-mg/gn6.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "8dd5-63e17f08-a126f;;;"
last-modified: Mon, 06 Feb 2023 22:28:24 GMT
content-type: image/jpeg
content-length: 36309
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn7.jpg
200 OK 30 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn7.jpg
IP
ASN #61317 Ipxo Uk Limited
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:21 16:51:24], progressive, precision 8, 90x89, components 3\012- data
Hash 0bbe4a60de658be0d1707cf28d5e6666
907bbbe759430155804e81afada80400329b6a7a
8023608464dadbb00990857e718616e32171d2656ec3c4b37bece9e2f3b85196
GET /RM/Senegal/gn-mg/gn7.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "7509-63e17f08-a1270;;;"
last-modified: Mon, 06 Feb 2023 22:28:24 GMT
content-type: image/jpeg
content-length: 29961
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn8.jpg
200 OK 38 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn8.jpg
IP
ASN #61317 Ipxo Uk Limited
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:30 00:08:03], progressive, precision 8, 150x135, components 3\012- data
Hash 989e25c6a34ce126dda87f4d50557bc4
5afe76ce55c4c9a2118727e9144cdb69bb4c5676
dbf83283f80616aaf6c6200a6a6b493efbc128957f829144ed07a2aa804f8fc6
GET /RM/Senegal/gn-mg/gn8.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "941b-63e17f0a-a1271;;;"
last-modified: Mon, 06 Feb 2023 22:28:26 GMT
content-type: image/jpeg
content-length: 37915
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn9.jpg
200 OK 36 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn9.jpg
IP
ASN #61317 Ipxo Uk Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:21 17:53:11], baseline, precision 8, 300x142, components 3\012- data
Hash 50fe91194f17d5c468219a8c872be316
270889903ac4018b7e3301bdacf38765718485c8
43124b3b770ed4da33a925dc998eef7821763ce3c53a7b19b2f0f77e545b7f03
GET /RM/Senegal/gn-mg/gn9.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "8d43-63e17f0b-a1272;;;"
last-modified: Mon, 06 Feb 2023 22:28:27 GMT
content-type: image/jpeg
content-length: 36163
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gn3.jpg
200 OK 30 kB URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gn3.jpg
IP
ASN #61317 Ipxo Uk Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9], baseline, precision 8, 90x81, components 3\012- data
Hash fcc368a17feba9b6381e61dba3d2c98c
0bb93f415d63714fbf054dfafaa79ef1f27e0057
2ab56a46aeeeca0c3a91f766088fab64869780ae29eb8b2c3e2359906ad9b17d
GET /RM/Senegal/gn-mg/gn3.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:02 GMT
etag: "730d-63e17f03-a126c;;;"
last-modified: Mon, 06 Feb 2023 22:28:19 GMT
content-type: image/jpeg
content-length: 29453
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:02 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
301 Moved Permanently 0 B URL HTTP/2 dailyrew23.info/RM/Senegal?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
IP
ASN #61317 Ipxo Uk Limited
GET /RM/Senegal?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0 HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
content-type: text/html
date: Mon, 06 Feb 2023 22:39:00 GMT
server: LiteSpeed
location: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
content-encoding: gzip
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
dailyrew23.info/RM/Senegal/gn-mg/gnn.jpg
200 OK 0 B URL HTTP/2 dailyrew23.info/RM/Senegal/gn-mg/gnn.jpg
IP
ASN #61317 Ipxo Uk Limited
GET /RM/Senegal/gn-mg/gnn.jpg HTTP/1.1
Host: dailyrew23.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/RM/Senegal/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3Dda27d233-42bd-4b6b-aa9b-aab36f5b498c..l%3D0f8ad3c3-33f4-425a-9158-154bb16f03af..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 13 Feb 2023 22:39:01 GMT
etag: "460e-63e17f0d-a1274;;;"
last-modified: Mon, 06 Feb 2023 22:28:29 GMT
content-type: image/jpeg
content-length: 17934
accept-ranges: bytes
date: Mon, 06 Feb 2023 22:39:01 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
deefauph.com/pfe/current/micro.tag.min.js?z=5681109&sw=/sw-check-permissions-a90c6.js
200 OK 0 B URL HTTP/2 deefauph.com/pfe/current/micro.tag.min.js?z=5681109&sw=/sw-check-permissions-a90c6.js
IP
GET /pfe/current/micro.tag.min.js?z=5681109&sw=/sw-check-permissions-a90c6.js HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dailyrew23.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 22:39:02 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 11:03:52 GMT
etag: W/"63d3af98-a083"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
3.70.16.242
34.117.237.239
23.36.76.226
181.215.78.145
139.45.197.251