offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
200 OK 12 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1261)
Hash d2e5890c44fa27e135d94cf09c953ce1
98591f0d7deccfb01e4ce6c7ae10bafa67c84dea
1b1102c7e9eed19ce2ecfe2bce90a7c023cf3157e1500988cc483eafe7f930b8
GET /1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732 HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65fc860bc043f3fb83bdc3debdcd322d
418010755deae099ef1284e402813c5837a10f42
d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2171
Expires: Fri, 24 Mar 2023 11:32:42 GMT
Date: Fri, 24 Mar 2023 10:56:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8332
Expires: Fri, 24 Mar 2023 13:15:23 GMT
Date: Fri, 24 Mar 2023 10:56:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 24 Mar 2023 10:15:14 GMT
content-type: application/json
age: 2477
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a5d4696a6090c295850554508b51ce
c44e143c2223546e64b19f543b8101aaf3b11e97
8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20702
Expires: Fri, 24 Mar 2023 16:41:33 GMT
Date: Fri, 24 Mar 2023 10:56:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ezCrXqQiY7Kmxfb1y+4gkJUw+/6YswZHtlNgU2TXzr/AHaZWQ0pIjL+Q6S7XSboNL04iYJQrh34=
x-amz-request-id: JP43TG45MK5VT8CQ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 24 Mar 2023 10:00:19 GMT
age: 3372
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 24 Mar 2023 10:56:31 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
offer.essayzon.com/1/myprize/boxwin/index_files/froala_style.css
200 OK 7.2 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/index_files/froala_style.css
IP
File type ASCII text, with very long lines (7048)
Hash 8d4fba5186f02a0c4458986b0cf91667
785579011ecdda9e4754ca41649fa2fc06453b52
1cfc73a6db9523c12b6b7f5d009bed19c8799eed001f607bd891a1fd838b7739
GET /1/myprize/boxwin/index_files/froala_style.css HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 200 OK
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Last-Modified: Sun, 13 Feb 2022 14:01:51 GMT
Accept-Ranges: bytes
Content-Length: 7208
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
offer.essayzon.com/1/myprize/boxwin/index_files/mycss.css
200 OK 63 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/index_files/mycss.css
IP
File type ASCII text, with very long lines (62302)
Hash 2b37216df12f31603669e8c36bb17f07
21430816671911f6718866d509c06ff2e13e1939
e8e2aa7f91f6f8d1064f0d3851c4e350e9e5675b65116d2dc21fddbae235d552
GET /1/myprize/boxwin/index_files/mycss.css HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 200 OK
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Last-Modified: Tue, 24 May 2022 08:19:50 GMT
Accept-Ranges: bytes
Content-Length: 62845
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
offer.essayzon.com/1/myprize/boxwin/index_files/c1ffd89caad1a6f1ac64e76a76c000bc.js
200 OK 88 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/index_files/c1ffd89caad1a6f1ac64e76a76c000bc.js
IP
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
Analyzer Verdict Alert fortinet Phishing
GET /1/myprize/boxwin/index_files/c1ffd89caad1a6f1ac64e76a76c000bc.js HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 200 OK
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Last-Modified: Sun, 13 Feb 2022 14:01:51 GMT
Accept-Ranges: bytes
Content-Length: 88145
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 24 Mar 2023 10:17:23 GMT
age: 2348
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
offer.essayzon.com/1/myprize/boxwin/index_files/62becd726872236d701af5d76cf57542.js
404 Not Found 59 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/index_files/62becd726872236d701af5d76cf57542.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381)
Hash 0c9615ec9b9af58042e32ca6fcb4cfbf
dd19dfec4b255355b8ae399323586893e43d3744
1bbfd4e47b662669b1f9bac163a5204c21ec3973825f459005a94c10c4ac5b9e
Analyzer Verdict Alert fortinet Phishing
GET /1/myprize/boxwin/index_files/62becd726872236d701af5d76cf57542.js HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 404 Not Found
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://offer.essayzon.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
offer.essayzon.com/1/myprize/boxwin/index_files/micro.js
404 Not Found 59 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/index_files/micro.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381)
Hash a5d9cb27f5ea3f812e7cd5a2dee8334e
93649cbd9f4353941379dd175a29c48f2b6d8ea7
c32b3953739f432822b93ff7a95ceba6aa52635c0bd399c0900e7a07b84a9a5e
Analyzer Verdict Alert fortinet Phishing
GET /1/myprize/boxwin/index_files/micro.js HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 404 Not Found
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://offer.essayzon.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 18b877ebbad1529e4bd91e12220d91c4
a3d64fb3d9cc1fe3a29b261c4ec9acfe134dfedc
7001d3ef847c7002ac15155f0dfcc0a369f19860e85c8e90530f1e7b2dd88f09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9212
Expires: Fri, 24 Mar 2023 13:30:03 GMT
Date: Fri, 24 Mar 2023 10:56:31 GMT
Connection: keep-alive
offer.essayzon.com/1/myprize/boxwin/header-logo.svg
200 OK 18 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/header-logo.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (9463), with CRLF line terminators
Hash 61e37d8c757872ce48534e467336f278
7064121964b52465231a8806a68ea0701395460c
2eccd00ff9d42512cc11b7e443e3308755f6e3196997d751dfc93af3bc58f4c0
Analyzer Verdict Alert fortinet Phishing
GET /1/myprize/boxwin/header-logo.svg HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 200 OK
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Last-Modified: Tue, 24 May 2022 08:35:23 GMT
Accept-Ranges: bytes
Content-Length: 17551
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml
offer.essayzon.com/1/myprize/boxwin/index_files/b45cbc066907105f9fdb6ff6f3de0bf3.png
200 OK 2.3 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/index_files/b45cbc066907105f9fdb6ff6f3de0bf3.png
IP
File type PNG image data, 257 x 184, 8-bit colormap, non-interlaced\012- data
Hash 57cffe641003f9a80834df4f706d16c3
900af1f1f75f11f547bf4bab2f9f88f0b3b0c38d
fd0a52dab9715198deaac93ec52117c0443279db1ed9b186790806d7542e98aa
GET /1/myprize/boxwin/index_files/b45cbc066907105f9fdb6ff6f3de0bf3.png HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 200 OK
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Last-Modified: Sun, 13 Feb 2022 14:01:51 GMT
Accept-Ranges: bytes
Content-Length: 2283
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
offer.essayzon.com/1/myprize/boxwin/fnbg.png
200 OK 24 kB URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/fnbg.png
IP
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 320eaf9f6b1afc63cfa9ba72ac5f800f
b0f662a8365ae83b65b6fa9f86823848f3ed0136
051b719032c3b27200c9c61f6b17e957eb90dd85abc1b56b7753437f01616b17
GET /1/myprize/boxwin/fnbg.png HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 200 OK
Date: Fri, 24 Mar 2023 10:56:31 GMT
Server: Apache
Last-Modified: Tue, 24 May 2022 08:22:28 GMT
Accept-Ranges: bytes
Content-Length: 23901
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9572aaf890bda34579ebc926f2d9a8b7
eae074f6944677b80022ae94a012d2d49453a7e7
2d7eaffb00d511cd2264ec08a98e1b9eac43bac9edd41d496166678147779e4e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2D7EAFFB00D511CD2264EC08A98E1B9EAC43BAC9EDD41D496166678147779E4E"
Last-Modified: Thu, 23 Mar 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 24 Mar 2023 16:56:32 GMT
Date: Fri, 24 Mar 2023 10:56:32 GMT
Connection: keep-alive
offer.essayzon.com/favicon.ico
302 Found 0 B URL HTTP/1.1 offer.essayzon.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
HTTP/1.1 302 Found
Date: Fri, 24 Mar 2023 10:56:32 GMT
Server: Apache
Link: <http://offer.essayzon.com/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Location: http://offer.essayzon.com/wp-includes/images/w-logo-blue-white-bg.png
Content-Length: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jUJKwZlhpsCc8IPdkXhjdA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4e/P6635lAxNi9bgapR57zurVik=
offer.essayzon.com/wp-includes/images/w-logo-blue-white-bg.png
200 OK 4.1 kB URL HTTP/1.1 offer.essayzon.com/wp-includes/images/w-logo-blue-white-bg.png
IP
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://offer.essayzon.com/1/myprize/boxwin/FNB.php?key=eyJ0aW1lc3RhbXAiOiIxNjc5NjU1MzU5IiwiaGFzaCI6Ijg4ZmNjYmFlYjE4NGI4NGRiOTA1NjdlNTBlZmUyNTQ2YWJiY2YzNjAifQ==&bemobdata=c=b9dfad6b-d5af-48fb-b769-5b61926663fa..l=97f36ce2-5ed7-4bcb-a817-b75fdeec624d..a=0..b=0..r=http://tracker.essayzon.com..ts=1679655359732
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 24 Mar 2023 10:56:32 GMT
Server: Apache
Last-Modified: Thu, 08 Dec 2022 05:14:54 GMT
Accept-Ranges: bytes
Content-Length: 4119
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11866
Expires: Fri, 24 Mar 2023 14:14:19 GMT
Date: Fri, 24 Mar 2023 10:56:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11866
Expires: Fri, 24 Mar 2023 14:14:19 GMT
Date: Fri, 24 Mar 2023 10:56:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11866
Expires: Fri, 24 Mar 2023 14:14:19 GMT
Date: Fri, 24 Mar 2023 10:56:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11866
Expires: Fri, 24 Mar 2023 14:14:19 GMT
Date: Fri, 24 Mar 2023 10:56:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11866
Expires: Fri, 24 Mar 2023 14:14:19 GMT
Date: Fri, 24 Mar 2023 10:56:33 GMT
Connection: keep-alive
tracker.essayzon.com/click
200 OK 4.2 kB URL HTTP/2 tracker.essayzon.com/click
IP
Hash 11dd4bb74d3966d0122fe3dc3d9627d8
a42ac010130970e01416873e0f3aa1554b523413
371d69eb1ea04444ef377efeb915ea85796632d10f3326fb443199381c947666
Analyzer Verdict Alert fortinet Phishing
GET /click HTTP/1.1
Host: tracker.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://offer.essayzon.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Fri, 24 Mar 2023 10:56:32 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
access-control-allow-origin: *
etag: W/"12c-g6W6mfjiu2HgZOPjR8TsJ9uR8sU"
x-response-time: 5.302ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48579581-7121-436c-a612-bb4c179f2542.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48579581-7121-436c-a612-bb4c179f2542.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f46d765cbcbbcd9707a21eec12d80002
d9bab36f53de76263a67bc34364e33bed28d35cd
772e85ac55db0fc3ca75329e0197c7caeff466e90b5cf85df7ccb44a85a253f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48579581-7121-436c-a612-bb4c179f2542.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4438
x-amzn-requestid: ce3cbb97-2a19-4499-8ab7-18cf5f99b5ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CK85SG3_oAMFQcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641aa83b-2750db5d028ac4ac54a865f8;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 07:03:23 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: s3be2clZAQ4R0f442UhQKzqwRKV4cO9mRaWArwIGHl42yU7N2JG36Q==
via: 1.1 53ee82a7eb57de316cba44c26680b4a6.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 13:45:06 GMT
age: 76287
etag: "d9bab36f53de76263a67bc34364e33bed28d35cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89cd024b8021bb2873b0b8972c77cb47
9aea167a3ebf62d91e705433f13b9fb0194daad4
454e0b9e6e12f7a8a1a87913fb7f539358bbfdb1371e30abd472c897082c2a38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8490
x-amzn-requestid: 7444a745-87e0-4424-92fd-630bf7cacc0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQP4QFRxoAMF3Yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc69a-112bec36430d78e3733e6e12;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:37:31 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: PCrktePti3HtIntww9Fq70JsHe6rENG1L_AQX6avgkSNDxnaYOtOSQ==
via: 1.1 626ad4a6bf529166d2aad94a2957694c.cloudfront.net (CloudFront), 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 22:00:43 GMT
etag: "9aea167a3ebf62d91e705433f13b9fb0194daad4"
content-type: image/jpeg
age: 46550
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1fa0168-8321-439e-81e8-ad3b5ec4e194.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1fa0168-8321-439e-81e8-ad3b5ec4e194.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43fcab1560508ad20dd86ca407ae0bee
2b65c2bf76c1a9f7c30aa05c2b9b0eb7af20891f
6ec31e9284f5b924cdac2807992158f67ade626426f31889d2e10f773c28ad6c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1fa0168-8321-439e-81e8-ad3b5ec4e194.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6918
x-amzn-requestid: 19587c2b-dc34-4d14-b164-8eef21c6913c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPH2EEfoAMFfQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc565-07fcd70764a3ee2d5dc42bdf;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:32:21 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: qJsMrIQRJJpFAgcUvKE7ySjxeFoqQgH-iQMbRUnzG_vccSlTr2532Q==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:56:12 GMT
age: 46821
etag: "2b65c2bf76c1a9f7c30aa05c2b9b0eb7af20891f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F588b7484-3598-4d13-aaa7-b86cf3e62e45.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F588b7484-3598-4d13-aaa7-b86cf3e62e45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58c58176f0c5825828c8ca12e6471fe1
fe0f05aaa351cfcf5d00c6e96fcefefcdeb51480
c3a5d4595188ee57312b636e4c605b368088eeb8be2c86ae5f77e379f51b79f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F588b7484-3598-4d13-aaa7-b86cf3e62e45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7696
x-amzn-requestid: c4e2712e-c6f7-499a-980d-98120ede7b9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPt1Hv3oAMF5wg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc658-6b5fc3f005b6d210710a267a;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:36:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: o9mJZed_h1-gITgHyFrt2GJ_N1jCIadpgm4dhEIKT4axJZwhKT8c0w==
via: 1.1 185f4b03b711932fc7e735c08fdc5abe.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:43:19 GMT
age: 47594
etag: "fe0f05aaa351cfcf5d00c6e96fcefefcdeb51480"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 68798f0963b37143bcbec5c6e08f2efe
00bb4ca04f3e52c8d9eacec7449a9cf49f6c312a
7c54bbd23a76d8b4c15e352b92e33c7164916899a5af71ba34a7af884b8a0944
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6403
x-amzn-requestid: aab6628c-f612-4b57-9ae1-0017714e19c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPHyEIkIAMF4JA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc564-2110e0d35561ab794e44e966;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:32:20 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: V4F_j_MuQgkRSKgCVI8OaJH2ZUbo6FcSk6Qv-BB4uAfm84jsQ2qklg==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 49cdeca097624936e070b73619df7da8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:43:19 GMT
age: 47594
etag: "00bb4ca04f3e52c8d9eacec7449a9cf49f6c312a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
offer.essayzon.com/1/myprize/boxwin/index_files/top_r.png
404 Not Found 0 B URL HTTP/1.1 offer.essayzon.com/1/myprize/boxwin/index_files/top_r.png
IP
GET /1/myprize/boxwin/index_files/top_r.png HTTP/1.1
Host: offer.essayzon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://offer.essayzon.com/1/myprize/boxwin/index_files/mycss.css
HTTP/1.1 404 Not Found
Date: Fri, 24 Mar 2023 10:56:32 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://offer.essayzon.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
162.246.59.148
3.70.16.242
23.36.76.226
0.0.0.0