urlquery - report: www.mrktgtrck.me/go/da1862c2-ff22-471f-a47c-614d42082680

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
r3.o.lencr.org (7)	344	No data	No data	23.36.76.226
za.roulletewin.online (21)	0	2022-06-02 19:12:30 UTC	2022-11-22 13:59:05 UTC	54.230.111.14	Unknown ranking
oungimuk.net (1)	335656	2021-02-10 04:25:40 UTC	2022-11-24 19:58:14 UTC	139.45.197.251
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
www.mrktgtrck.me (1)	0	No data	No data	3.70.16.242	Unknown ranking
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-24 05:36:55 UTC	34.102.187.140
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-24 05:30:55 UTC	34.117.237.239
ocsp.sca1b.amazontrust.com (1)	1015	2017-03-03 15:20:51 UTC	2019-03-27 04:05:54 UTC	143.204.42.156
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	35.160.97.225

Scan Date	Severity	Indicator	Comment
2022-11-25	2	www.mrktgtrck.me/go/da1862c2-ff22-471f-a47c-614d42082680	Phishing

Date	UQ / IDS / BL	URL	IP
2023-02-05 14:14:50 +0000	0 - 0 - 12	reminderset.com/go/dc26c419-4bb2-4522-a4df-b5 (...)	3.70.16.242
2023-02-05 13:57:18 +0000	0 - 0 - 3	win.2023prizes.com/go/192a5527-47b3-47b7-828e (...)	3.70.16.242
2023-02-05 12:11:27 +0000	0 - 0 - 2	n1sav.bemobtrcks.com/go/0aba6ff1-8137-4a65-96 (...)	3.70.16.242
2023-02-05 12:10:23 +0000	0 - 0 - 4	www.telera.site/go/1eb82493-107a-43b1-9f5a-5c (...)	3.70.16.242
2023-02-05 11:58:05 +0000	0 - 0 - 3	ss.redirectsstm.click/go/9d3cfb88-732e-4913-a (...)	3.70.16.242

Date	UQ / IDS / BL	URL	IP
2023-02-05 15:01:55 +0000	0 - 1 - 0	www.digital4trade.it/?mwscanparam=1675609287	52.16.126.4
2023-02-05 15:01:37 +0000	0 - 0 - 2	furned-mashorses.com/91a2b9e2-d005-4c9d-b220- (...)	18.193.235.10
2023-02-05 15:00:51 +0000	0 - 0 - 2	ads.istngo.com/c25d799b-b132-4db1-9fea-794ef4 (...)	18.195.123.247
2023-02-05 14:58:07 +0000	0 - 0 - 3	www.mysexymatches.com/c/ce443e09abe04b3a	52.17.88.125
2023-02-05 14:54:43 +0000	0 - 1 - 0	invle.co/cle5n5g	3.1.145.215

Date	UQ / IDS / BL	URL	IP
2023-02-04 09:59:01 +0000	0 - 0 - 3	www.mrktgtrck.me/go/8ef13fab-76dd-451f-8116-8 (...)	3.70.16.242
2023-01-26 11:10:39 +0000	0 - 0 - 1	www.mrktgtrck.me/go/da1862c2-ff22-471f-a47c-6 (...)	3.70.16.242
2022-12-25 21:56:15 +0000	0 - 0 - 2	www.mrktgtrck.me/go/aa34e98f-d5d5-4750-8a04-2 (...)	3.70.16.242
2022-12-24 08:03:17 +0000	0 - 0 - 1	www.mrktgtrck.me/go/9f126e50-8eb5-4d59-bef1-f (...)	3.70.16.242
2022-12-23 22:56:55 +0000	0 - 0 - 2	www.mrktgtrck.me/go/aa34e98f-d5d5-4750-8a04-2 (...)	3.70.16.242

Date	UQ / IDS / BL	URL	IP
2023-02-05 13:59:46 +0000	1 - 0 - 1	i.generousglimmeringmobile.shop/wbiwxb/i14s22 (...)	104.16.118.67
2023-02-05 10:53:36 +0000	1 - 0 - 1	47.winprizes147.digital/mx2/mxnotix23.html	217.69.14.8
2023-02-05 10:40:19 +0000	1 - 0 - 12	zmforever.digital/alwheelpropzm/index.html?br (...)	217.69.13.14
2023-02-05 08:54:51 +0000	1 - 0 - 0	44.winprizes544.digital/myaff2icu/index.php	45.76.148.82
2023-02-05 08:04:34 +0000	1 - 0 - 12	semegadate.digital/alwheeelpropse/index.html? (...)	217.69.13.14

Request	Response
GET /go/da1862c2-ff22-471f-a47c-614d42082680 HTTP/1.1 Host: www.mrktgtrck.me User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: www.mrktgtrck.me/go/da1862c2-ff22-471f-a47c-614d42082680 FQDN: www.mrktgtrck.me IP: 3.70.16.242 HASH: 189f94a430115f85da7a18a16e15a3dbfcdd6a6481b83a52cd5b2b2740701214 3.70.16.242 HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Server: openresty Date: Fri, 25 Nov 2022 06:53:02 GMT Content-Length: 614 Connection: keep-alive accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced Access-Control-Allow-Origin: * Location: https://za.roulletewin.online/home_v2.html?pw=ip12&click=www.mrktgtrck.me&campaign_id=da1862c2-ff22-471f-a47c-614d42082680&landing_name=dynamic%20roullette%20ip12&bemobdata=c%3Dda1862c2-ff22-471f-a47c-614d42082680..l%3Dc39de364-e811-4881-81c6-65495dba935e..a%3D0..b%3D0 Set-Cookie: bemob-uniq-visit:da1862c2-ff22-471f-a47c-614d42082680=1; Domain=www.mrktgtrck.me; Path=/; Expires=Sat, 26 Nov 2022 06:53:02 GMT; HttpOnly bemob-rotation:da1862c2-ff22-471f-a47c-614d42082680:random:d83b0eed9d4800d6bd3927ed31df2fe4=0-2-0; Domain=www.mrktgtrck.me; Path=/; Expires=Sat, 26 Nov 2022 06:53:02 GMT; HttpOnly bemob-track-url=https%3A%2F%2Fza.roulletewin.online%2Fhome_v2.html%3Fpw%3Dip12%26click%3Dwww.mrktgtrck.me%26campaign_id%3Dda1862c2-ff22-471f-a47c-614d42082680%26landing_name%3Ddynamic%2520roullette%2520ip12%26bemobdata%3Dc%253Dda1862c2-ff22-471f-a47c-614d42082680..l%253Dc39de364-e811-4881-81c6-65495dba935e..a%253D0..b%253D0; Domain=www.mrktgtrck.me; Path=/; Expires=Sat, 26 Nov 2022 06:53:02 GMT; HttpOnly Vary: Accept X-Response-Time: 46.133ms Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache --- Additional Info --- Magic: HTML document, ASCII text, with very long lines (614), with no line terminators Size: 614 Md5: 2ac1918b73fe6c01b96a92a5e5bf7ffc Sha1: c560eb22739219a2ebb5d926f3f47997ea2d2e4e Sha256: 189f94a430115f85da7a18a16e15a3dbfcdd6a6481b83a52cd5b2b2740701214 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA" Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6524 Expires: Fri, 25 Nov 2022 08:41:46 GMT Date: Fri, 25 Nov 2022 06:53:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7c60904d097cde276e4e5632cef1b9f1 Sha1: 4f805026462589345d85e8df2d18eafba6237504 Sha256: 12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4742 Cache-Control: max-age=104231 Date: Fri, 25 Nov 2022 06:53:02 GMT Etag: "637f47ef-1d7" Expires: Sat, 26 Nov 2022 11:50:13 GMT Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT Server: ECS (ska/F70D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: af40a2fcf8debb90c3608002da6c907a Sha1: 3c75d6c0b557a3bd8d5db50155b8d896e852c145 Sha256: 555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 25 Nov 2022 06:19:04 GMT cache-control: public,max-age=3600 age: 2038 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 4d7e4eed097b9c4e5d509419f1cfc85a Sha1: 290bb3d428a7c6330e2e3d73a952b16f820896c8 Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2" Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5420 Expires: Fri, 25 Nov 2022 08:23:22 GMT Date: Fri, 25 Nov 2022 06:53:02 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 260e9998c20d831b66f1029c8f47aac9 Sha1: 716d630f647c54dc69a7f9c63a6cac294b3df7f7 Sha256: c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: 8ubx4Y5tsVzJ5BruFMUuavlRom3U2TmyG3fUFn9ee0Cz/4b3N39ALz0tJRHGBF81oSBQ9DNob60= x-amz-request-id: XVVS75KV3DNRHFDW content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 25 Nov 2022 06:43:44 GMT age: 558 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 25 Nov 2022 06:53:02 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 143.204.42.156 HASH: a5cc399079997ecd20b39dfd4c40f1238552b7cdfc782b9a347c99080bcffb2b 143.204.42.156 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=146991 Date: Fri, 25 Nov 2022 06:53:03 GMT Etag: "6380017e-1d7" Expires: Sat, 26 Nov 2022 23:42:54 GMT Last-Modified: Thu, 24 Nov 2022 23:42:54 GMT Server: nginx X-Cache: Miss from cloudfront Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: fHdtO0SviJTNkTPcCT_XCuhvvSzpy6TXsnMVoRJHVHB3I31uhnBirA== --- Additional Info --- Magic: data Size: 471 Md5: 8c0d17627145c1a60d40a93d915427de Sha1: c0970705a357c17beaeaac0556730950b0bd3bb1 Sha256: a5cc399079997ecd20b39dfd4c40f1238552b7cdfc782b9a347c99080bcffb2b
GET /files/like_user_2.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/like_user_2.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 0cef7673d671be586ddb3eb27a367f1b260e900891d70509ca1cdc3fc04532ba 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 882 date: Thu, 24 Nov 2022 17:37:51 GMT last-modified: Fri, 08 Apr 2022 00:23:55 GMT etag: "207da600a6688405aba5971926a253c6" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: _60K7gjqlqcheCFk20SVebtViW07NO5QX0TQOwtLNadJtmMvZu2sJA== age: 47713 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 24x24, components 3\012- data Size: 882 Md5: 207da600a6688405aba5971926a253c6 Sha1: be25b2041157fbdff20e48d49e8063105c9e1f0a Sha256: 0cef7673d671be586ddb3eb27a367f1b260e900891d70509ca1cdc3fc04532ba
GET /files/za15.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/za15.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: fb6321f2b846c1081c201fa6c2c8609480ff7bd6011335a41873f7f5e20743ea 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 1408 date: Thu, 24 Nov 2022 17:37:51 GMT last-modified: Fri, 08 Apr 2022 00:24:10 GMT etag: "9994be8f739e48d937647ce262bb06d6" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 3zbkVxaSWYqHCHHbPCptyQmoiAsJIG1hWcQL46hv43aVJ1GTr5_J7w== age: 47713 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1408 Md5: 9994be8f739e48d937647ce262bb06d6 Sha1: c5feb34789fe8294e2d603439db5d2d45aa7506c Sha256: fb6321f2b846c1081c201fa6c2c8609480ff7bd6011335a41873f7f5e20743ea
GET /files/like_user_1.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/like_user_1.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 0e3817ff1d2e1ed6dc399a22e4b49363f75d2a0a79eab5eb287a2d25efda80ae 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 995 date: Thu, 24 Nov 2022 23:16:32 GMT last-modified: Fri, 08 Apr 2022 00:23:54 GMT etag: "c9bf35932083d0f7709882c8aef8c1a0" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: egyIvm_28RtAEi2h9tKypMLOoPI4a0ngjGPo_xjsvGcPmb1e7DzllA== age: 27392 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 24x24, components 3\012- data Size: 995 Md5: c9bf35932083d0f7709882c8aef8c1a0 Sha1: 5c465b270a14ebbab5a66ddabd4387585df0f295 Sha256: 0e3817ff1d2e1ed6dc399a22e4b49363f75d2a0a79eab5eb287a2d25efda80ae
GET /files/za14.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/za14.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 2cbcd11d38c74b82fe88e03d700f292ec90f35ffeae98f2f6e244e6258b02525 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 1270 date: Thu, 24 Nov 2022 17:37:51 GMT last-modified: Fri, 08 Apr 2022 00:24:08 GMT etag: "8cea16a3748b83532a70ed7818d3d91e" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: xVn-HxeQXTi80sXiV1ogke5IpyWPpi48635r1VnTyirt0y89FQbuRw== age: 47713 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1270 Md5: 8cea16a3748b83532a70ed7818d3d91e Sha1: 64002f94b5fdd4475da461fb4121e8d72b33cc2a Sha256: 2cbcd11d38c74b82fe88e03d700f292ec90f35ffeae98f2f6e244e6258b02525
GET /files/footer_right.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/footer_right.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 6092e790e8edcbe2cf814095a5efd7c1fc0317af4673855e4a9a2b0e0f694e93 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 2047 date: Thu, 24 Nov 2022 23:16:32 GMT last-modified: Fri, 08 Apr 2022 00:23:44 GMT etag: "770d317bc385da31c2538c66c7ff9404" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: zDpVPazcdfzYEepZzbK7XhXwaTpwsXXFFuR7uwyrct53LUboex0ggQ== age: 27392 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 76 x 30, 8-bit colormap, non-interlaced\012- data Size: 2047 Md5: 770d317bc385da31c2538c66c7ff9404 Sha1: 2f9472649ba239b64423c99b995ee4d7be6b715e Sha256: 6092e790e8edcbe2cf814095a5efd7c1fc0317af4673855e4a9a2b0e0f694e93
GET /files/clip_footer_3.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/clip_footer_3.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 292ce5b88f14029a90f59f9ac004b7aeeb353b43637870ff4b19ddd0228ab4c4 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 2445 date: Thu, 24 Nov 2022 17:37:51 GMT last-modified: Fri, 08 Apr 2022 00:23:41 GMT etag: "0650d2120ba512d13badb739eb3bcb2f" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: _nWQH6Eqgf3I8NBDTQqU-4aNtIryevJI2m5ryy1ZtSUyrl613NB9PA== age: 47713 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data Size: 2445 Md5: 0650d2120ba512d13badb739eb3bcb2f Sha1: ca501dbce36ab62896b57c043b7690bfc1b7f0c3 Sha256: 292ce5b88f14029a90f59f9ac004b7aeeb353b43637870ff4b19ddd0228ab4c4
GET /files/za11.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/za11.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: c30e8c2727aef24fffca360d8781dd4666748b3b379491eb0a7d2bd7905604ce 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 1657 date: Thu, 24 Nov 2022 23:16:32 GMT last-modified: Fri, 08 Apr 2022 00:24:04 GMT etag: "4af9bd008e64101ac2709ecdf7714216" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: frs7Uw7FL46ceYe9tbsx5R60tm8m5G8j2Gh1UjqLlBdDIH8yREBrrw== age: 27392 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1657 Md5: 4af9bd008e64101ac2709ecdf7714216 Sha1: a537fea579d793385498fbf11f0ff116b52f2157 Sha256: c30e8c2727aef24fffca360d8781dd4666748b3b379491eb0a7d2bd7905604ce
GET /files/za13.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/za13.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 76a25a938b3717b3580b0c4f7a892aa487b1addf6e48fbdacc2f989223045965 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 1231 date: Thu, 24 Nov 2022 23:16:32 GMT last-modified: Fri, 08 Apr 2022 00:24:07 GMT etag: "294fa989a992b50b015bbf18f698a6f4" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: FouQlkSD2EVfjFbW6kNds2uZajVflJnpJ3vrRklswjvIFodmiOZUSw== age: 27392 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1231 Md5: 294fa989a992b50b015bbf18f698a6f4 Sha1: a0988dda1161cf5340564db19a3d71af630a1b6f Sha256: 76a25a938b3717b3580b0c4f7a892aa487b1addf6e48fbdacc2f989223045965
GET /files/notify_2x.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/notify_2x.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 6314ac94872c76d8fba23bba062b0084de4902a7465c27e24c69f22329abf6dc 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 279 date: Thu, 24 Nov 2022 17:37:51 GMT last-modified: Fri, 08 Apr 2022 00:23:59 GMT etag: "9835411adc549e17f7cfdc83a2e4aa42" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: B3yJm3MB07r_WV6vbJ7D2-pFsTnbcShwH-AQHnoyt0xBTuXEb_O1rQ== age: 47713 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 36 x 32, 8-bit colormap, non-interlaced\012- data Size: 279 Md5: 9835411adc549e17f7cfdc83a2e4aa42 Sha1: c90593f808c84297502be1bb7bd4a524fc74e5a7 Sha256: 6314ac94872c76d8fba23bba062b0084de4902a7465c27e24c69f22329abf6dc
GET /files/action_icons_20px_2x.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/action_icons_20px_2x.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 37eb737c2d454b3ad7637228a7c8bebf3b327796f1cb74605e148b2165671ffa 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 1688 date: Thu, 24 Nov 2022 23:16:32 GMT last-modified: Fri, 08 Apr 2022 00:23:39 GMT etag: "aad03737463aa556537bb7f389c63b0d" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: XRIIU5OE8AOCcVBR_8BqnV1XW3HONBPnc4YjMwnv8_jGyzm5SHWpRg== age: 27392 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data Size: 1688 Md5: aad03737463aa556537bb7f389c63b0d Sha1: ce66e06c100177343e07601a8d08c64cbbfcbf40 Sha256: 37eb737c2d454b3ad7637228a7c8bebf3b327796f1cb74605e148b2165671ffa
GET /files/za16.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/za16.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 139b3d210ff37135298b973f83d341a5a8511f3b0250e30ee73d2d092f243008 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 1222 date: Thu, 24 Nov 2022 17:37:51 GMT last-modified: Fri, 08 Apr 2022 00:23:34 GMT etag: "c7168e3bc82112a123c5ff4591a8f801" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: zyjWaLBWkQEyGNH0IyN_2m6f7cLTw162lBgAgqYT-IV2eoApnAPLwQ== age: 47713 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1222 Md5: c7168e3bc82112a123c5ff4591a8f801 Sha1: 241af8eb62b54f851da7631f440b1057ce2e69a0 Sha256: 139b3d210ff37135298b973f83d341a5a8511f3b0250e30ee73d2d092f243008
GET /files/spin_prize2.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/spin_prize2.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 35cc5a6a01986aaa5c716b507657218d84e871a2934964a9da0ef7cad8ce65b7 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 2902 date: Thu, 24 Nov 2022 23:16:32 GMT last-modified: Fri, 08 Apr 2022 00:24:03 GMT etag: "179983598c0105247ced371aa7a0c63d" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: Rss5OE42F-hcxMPhnCNCk2QvQu6VVAskzv5kFV2eWOQ4zRN3EdN6xQ== age: 27392 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data Size: 2902 Md5: 179983598c0105247ced371aa7a0c63d Sha1: 579afe76b9fcb3282783e0f0a13d14af7317b1c1 Sha256: 35cc5a6a01986aaa5c716b507657218d84e871a2934964a9da0ef7cad8ce65b7
GET /files/menu_2x.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/menu_2x.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 2d19d22c105a43bfcd4dfc2271980939375ef21e09489c489bcfc9b94eb15bef 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 156 date: Thu, 24 Nov 2022 23:16:32 GMT last-modified: Fri, 08 Apr 2022 00:23:58 GMT etag: "ab76dd7d2f4b9db14ed75a76107598ce" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: vWqkjFgcpi70VYuJFed80m61fzRtc1mBXCzYNoU8XWg467KN1frlpA== age: 27392 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 40 x 36, 4-bit colormap, non-interlaced\012- data Size: 156 Md5: ab76dd7d2f4b9db14ed75a76107598ce Sha1: ba50ae179973afebfccbb1fe8b4566d94b54a814 Sha256: 2d19d22c105a43bfcd4dfc2271980939375ef21e09489c489bcfc9b94eb15bef
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: eb5b01642528cf47bda8a0daa19d02c30072ee492974d228ff6247cd8790d9d3 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EB5B01642528CF47BDA8A0DAA19D02C30072EE492974D228FF6247CD8790D9D3" Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11483 Expires: Fri, 25 Nov 2022 10:04:26 GMT Date: Fri, 25 Nov 2022 06:53:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: d361ed1681202c9e0c2608e5e4d0b0df Sha1: 2490265266e9c8e32557049a5cac3d8eb00d6db8 Sha256: eb5b01642528cf47bda8a0daa19d02c30072ee492974d228ff6247cd8790d9d3
GET /files/za12.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/za12.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 3c88444f9edf2ac7dcf69f6c276705cf0118831317d35c56d7354cb3ff2b90c1 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 1469 date: Thu, 24 Nov 2022 23:16:32 GMT last-modified: Fri, 08 Apr 2022 00:24:06 GMT etag: "b1f7aea5a2798288d0bf31e794ec56d7" accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: yRPNOy5mR58Ikurb0pw79wqEZ33ZRwX967Aqf2jBlAjs-cL0y--E-w== age: 27392 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1469 Md5: b1f7aea5a2798288d0bf31e794ec56d7 Sha1: a99e224dbad2c3935553b132f6e4f5bf67a6d872 Sha256: 3c88444f9edf2ac7dcf69f6c276705cf0118831317d35c56d7354cb3ff2b90c1
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 25 Nov 2022 06:11:11 GMT cache-control: public,max-age=3600 age: 2512 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /pfe/current/micro.tag.min.js?z=5033323&sw=/sw-check-permissions-b79d2.js HTTP/1.1 Host: oungimuk.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: oungimuk.net/pfe/current/micro.tag.min.js?z=5033323&sw= (...) FQDN: oungimuk.net IP: 139.45.197.251 HASH: ef429a76d36d0d5eb627a679bc8e39bd9ea8e9fa8eca714239eb478b16e483b9 139.45.197.251 HTTP/2 200 OK content-type: application/javascript server: nginx date: Fri, 25 Nov 2022 06:53:03 GMT last-modified: Thu, 24 Nov 2022 15:53:54 GMT etag: W/"637f9392-12fca" access-control-allow-credentials: true cache-control: no-cache pragma: no-cache content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 27818 Md5: 1a0e9cbd49ce4cf2c0d90f71d6add0a5 Sha1: 7d7b6acd35aa18efd9b8b1372a9b8b32478476e6 Sha256: ef429a76d36d0d5eb627a679bc8e39bd9ea8e9fa8eca714239eb478b16e483b9
GET /files/za17.jpg HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/za17.jpg FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 8b8a98a1130580723db4df56c375be4e2efd1b175f8f02ae636f17ff68c79b7f 54.230.111.14 HTTP/2 200 OK content-type: image/jpeg content-length: 1082 last-modified: Fri, 08 Apr 2022 00:23:36 GMT accept-ranges: bytes server: AmazonS3 date: Fri, 25 Nov 2022 06:53:04 GMT etag: "7580401cffaa684e68a274e572984d0e" vary: Accept-Encoding x-cache: RefreshHit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: mkDsaYb0CM02nxWsXG7C932cfMijDv2FUxwdbsQXAJAHMs79wgug7g== X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1082 Md5: 7580401cffaa684e68a274e572984d0e Sha1: 5dc7412d1ad99cfdf429a2bb25b3c67c0c5e4bcc Sha256: 8b8a98a1130580723db4df56c375be4e2efd1b175f8f02ae636f17ff68c79b7f
GET /files/i12-g.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/i12-g.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: f3d89b5e24cac5f0f37f4663e6978847ff8bcee57323f174e9a44dd02cd02c9b 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 216231 last-modified: Fri, 08 Apr 2022 00:23:50 GMT accept-ranges: bytes server: AmazonS3 date: Fri, 25 Nov 2022 06:53:04 GMT etag: "f76249ee869540910a93722da57fc89d" vary: Accept-Encoding x-cache: RefreshHit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: ImF_EQSYlJw7oPqjvSrykCIY7CqB2fApZmzPfzCL1D0o3MzX8P1s_Q== X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 470 x 594, 8-bit/color RGBA, non-interlaced\012- data Size: 216231 Md5: f76249ee869540910a93722da57fc89d Sha1: 7d4d342200e8127cc20c207cbf37d1aedc0d3a73 Sha256: f3d89b5e24cac5f0f37f4663e6978847ff8bcee57323f174e9a44dd02cd02c9b
GET /files/comment_action_2x.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/comment_action_2x.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: aae9f320fa2facd07a569fe6ea8b9a2daa21129617c86898ce036f4a61129c60 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 637 last-modified: Fri, 08 Apr 2022 00:23:42 GMT accept-ranges: bytes server: AmazonS3 date: Fri, 25 Nov 2022 06:53:04 GMT etag: "97594dddb34f0d898250bee4fda1c518" vary: Accept-Encoding x-cache: RefreshHit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: cZPS3ZZRprvYd4Pp-tTNGafsP-F4VZK1P55unGdiTDBnE1gbANhH9Q== X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data Size: 637 Md5: 97594dddb34f0d898250bee4fda1c518 Sha1: e4c0bd32d1e82e6435e9893a8b946e76f5239a5d Sha256: aae9f320fa2facd07a569fe6ea8b9a2daa21129617c86898ce036f4a61129c60
GET /files/i12o.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/i12o.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: b38bf1b539778d26d1c69dc3e6ca8aab8259df7355a38098c77da98afae2e8dc 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 179933 last-modified: Fri, 08 Apr 2022 00:23:53 GMT accept-ranges: bytes server: AmazonS3 date: Fri, 25 Nov 2022 06:53:04 GMT etag: "f5f152667e46ff2539e8a6fb07cc5b4f" vary: Accept-Encoding x-cache: RefreshHit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: WGQrtHhSHmCwCU8IdkA8qg_10bWF0uUZxbAFTbDFrIKAf1N0-AGrQw== X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 470 x 594, 8-bit/color RGBA, non-interlaced\012- data Size: 179933 Md5: f5f152667e46ff2539e8a6fb07cc5b4f Sha1: 0962c219fc3077f6776f79bfa452696363d92945 Sha256: b38bf1b539778d26d1c69dc3e6ca8aab8259df7355a38098c77da98afae2e8dc
GET /files/i12-s.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/i12-s.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 9e53464c36538aef413e048b343afd585b3ed47445c49add49ab5e21c9920b55 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 221354 last-modified: Fri, 08 Apr 2022 00:23:51 GMT accept-ranges: bytes server: AmazonS3 date: Fri, 25 Nov 2022 06:53:04 GMT etag: "af95538412b63f46d385060bcfc42614" vary: Accept-Encoding x-cache: RefreshHit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: LSLEMe1XMMOZHc5MgZ76Xa0e4T71i8qzJzzVJvHqZb2LsUmvxwgBog== X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 470 x 594, 8-bit/color RGBA, non-interlaced\012- data Size: 221354 Md5: af95538412b63f46d385060bcfc42614 Sha1: a99dc95f13eb5c4721bd8a6b747262d7222fbc67 Sha256: 9e53464c36538aef413e048b343afd585b3ed47445c49add49ab5e21c9920b55
GET /files/pw_i12.png HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: za.roulletewin.online/files/pw_i12.png FQDN: za.roulletewin.online IP: 54.230.111.14 HASH: 0ee94d54673adfbf94f2dbf7c1addb124e4fc7da233061853c21e6573ac02c3f 54.230.111.14 HTTP/2 200 OK content-type: image/png content-length: 102758 date: Fri, 25 Nov 2022 06:53:04 GMT last-modified: Fri, 08 Apr 2022 00:24:02 GMT etag: "3ac0108b62f1b33f8dea072aac19d890" accept-ranges: bytes server: AmazonS3 x-cache: Miss from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: jRNNAfP4AuSG9w6M37_nDiIkRymJuGHjKWd5DViNt0XGhLAd0beOfg== X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 501 x 501, 8-bit/color RGBA, non-interlaced\012- data Size: 102758 Md5: 3ac0108b62f1b33f8dea072aac19d890 Sha1: 398b6c695cd6c5c53b7e82716e83c4a79fcc3715 Sha256: 0ee94d54673adfbf94f2dbf7c1addb124e4fc7da233061853c21e6573ac02c3f
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: iRRwMnSxFlOMB+MXZqaFig== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.160.97.225 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.160.97.225 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 6cT1Ps2DvJZkreXibw0YAuNIv3k= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69" Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9349 Expires: Fri, 25 Nov 2022 09:28:54 GMT Date: Fri, 25 Nov 2022 06:53:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b75c00c21f5854618bc06d14b8d83c40 Sha1: ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 Sha256: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69" Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9349 Expires: Fri, 25 Nov 2022 09:28:54 GMT Date: Fri, 25 Nov 2022 06:53:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b75c00c21f5854618bc06d14b8d83c40 Sha1: ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 Sha256: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69" Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9349 Expires: Fri, 25 Nov 2022 09:28:54 GMT Date: Fri, 25 Nov 2022 06:53:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b75c00c21f5854618bc06d14b8d83c40 Sha1: ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 Sha256: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69" Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9349 Expires: Fri, 25 Nov 2022 09:28:54 GMT Date: Fri, 25 Nov 2022 06:53:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b75c00c21f5854618bc06d14b8d83c40 Sha1: ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 Sha256: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7589 x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: brr5zH4qoAMF79Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0 x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: ZtjzvMh_vqVaOqm8xPfZ2EWGGl0X7Iv8GK40Z32EbKM4wk6tGPnlYA== via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 15:20:03 GMT age: 55982 etag: "22884cbc78622d6f78c1c3397c9b440946144a99" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7589 Md5: 06c6e720bc9900b38e88cd72f739603e Sha1: 22884cbc78622d6f78c1c3397c9b440946144a99 Sha256: 8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3955 x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cCM9NGJHoAMF4sQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0 x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ== via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Fri, 25 Nov 2022 02:07:28 GMT age: 17137 etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3955 Md5: 4006a9037ab5f28dca62b0aa7a704c41 Sha1: 74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b Sha256: 556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 010eeda33c923e2166851da1e131dcc21419d1f4f28995617ca93332ce4be08c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10679 x-amzn-requestid: aec8d040-d4e6-4185-b71e-7c049617ebc5 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b4J3VEM5IAMFtcg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637989c8-42b520ea3af2a2086ad416ad;Sampled=0 x-amzn-remapped-date: Sun, 20 Nov 2022 01:58:32 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: GkCprkFbPK6I-bo5k-rs37xaRDpqgUYbOydu2fd5-fTwqQ-d5lWlWw== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google date: Fri, 25 Nov 2022 05:12:48 GMT age: 6017 etag: "2ec124224738807229328a3ade6ca493ccf4b287" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10679 Md5: e2580ebded0a32ceecc3083ae1db2b37 Sha1: 2ec124224738807229328a3ade6ca493ccf4b287 Sha256: 010eeda33c923e2166851da1e131dcc21419d1f4f28995617ca93332ce4be08c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1abe4f62-70d8-471a-89fc-79dd854e637c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bda1bb57f0198e711c3018417513237b9533cfe2e5856ada5383f7461090f40a 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10955 x-amzn-requestid: efabf5fa-f031-4249-8a2c-01dd55c11d32 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b8JuxFj5oAMFvSw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637b232b-1a6f713b0674035c1a1b925a;Sampled=0 x-amzn-remapped-date: Mon, 21 Nov 2022 07:05:15 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: DLb4iXB5DlHVAliRxEaxufYLLVzNI44YLc7WqL0D5B062j53nTKo9A== via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 13:42:52 GMT age: 61813 etag: "9be5a5497a8566ea66e81765ef8566e6b716ab5b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10955 Md5: 7e97ba6c4c94a299553238e643a3acc7 Sha1: 9be5a5497a8566ea66e81765ef8566e6b716ab5b Sha256: bda1bb57f0198e711c3018417513237b9533cfe2e5856ada5383f7461090f40a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 633138e70f43e2be9cc447967044c4070bfc4d9285e5228361bebe255dc286e2 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10950 x-amzn-requestid: 9bb73841-83d9-48b2-8c79-f00a57612b4a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cFNstFeZoAMFopQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637ec31d-4e6aafd367c7740c77df133b;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 01:04:30 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Flw9EdzENUCOukD9HilOxntWCGlJbRReExn8Wb6p7bIUx8iSeIg1xg== via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 07:43:51 GMT age: 83354 etag: "18800e21d05596f7b64213072dee7dda5c1faf61" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10950 Md5: 4abf25d4a15ce58edadd54994b3434a2 Sha1: 18800e21d05596f7b64213072dee7dda5c1faf61 Sha256: 633138e70f43e2be9cc447967044c4070bfc4d9285e5228361bebe255dc286e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 2351 x-amzn-requestid: 141bbf99-5d78-4b9c-a537-491718aee68a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b43YGE_SoAMFlbw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6379d29a-00017cd344caea2b6408aeb3;Sampled=0 x-amzn-remapped-date: Sun, 20 Nov 2022 07:09:14 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: 1-8WM-7tNqakPDW9-K0GVbOKdotndEXj2QeJzw3cJol-g9TT5IVyOQ== via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 16:45:53 GMT age: 50832 etag: "41ef94d198bbf98185eb332a3b6934c3c26c3afc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 2351 Md5: 66d06d3cac1784e4ce6c8c89c300f10a Sha1: 41ef94d198bbf98185eb332a3b6934c3c26c3afc Sha256: 55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3
GET /home_v2.html?pw=ip12&click=www.mrktgtrck.me&campaign_id=da1862c2-ff22-471f-a47c-614d42082680&landing_name=dynamic%20roullette%20ip12&bemobdata=c%3Dda1862c2-ff22-471f-a47c-614d42082680..l%3Dc39de364-e811-4881-81c6-65495dba935e..a%3D0..b%3D0 HTTP/1.1 Host: za.roulletewin.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: za.roulletewin.online/home_v2.html?pw=ip12&click=www.mr (...) FQDN: za.roulletewin.online IP: 54.230.111.14 54.230.111.14 HTTP/2 200 OK content-type: text/html date: Thu, 24 Nov 2022 23:16:31 GMT last-modified: Tue, 19 Apr 2022 11:43:45 GMT etag: W/"1b1b982b7c03eed5a3e28ca4da549fb7" server: AmazonS3 content-encoding: br vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: cG0tBALgl_XYJZt1JgH1k6Mno0_T7gwnOJr3E31C7JnbeCQOWl3uug== age: 27393 X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 4742 

                                        
                                            
Cache-Control: max-age=104231 

                                        
                                            
Date: Fri, 25 Nov 2022 06:53:02 GMT 

                                        
                                            
Etag: "637f47ef-1d7" 

                                        
                                            
Expires: Sat, 26 Nov 2022 11:50:13 GMT 

                                        
                                            
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT 

                                        
                                            
Server: ECS (ska/F70D) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    af40a2fcf8debb90c3608002da6c907a

                                                Sha1:   3c75d6c0b557a3bd8d5db50155b8d896e852c145

                                                Sha256: 555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2" 

                                        
                                            
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5420 

                                        
                                            
Expires: Fri, 25 Nov 2022 08:23:22 GMT 

                                        
                                            
Date: Fri, 25 Nov 2022 06:53:02 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    260e9998c20d831b66f1029c8f47aac9

                                                Sha1:   716d630f647c54dc69a7f9c63a6cac294b3df7f7

                                                Sha256: c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 25 Nov 2022 06:53:02 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /files/like_user_2.jpg HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
content-length: 882 

                                        
                                            
date: Thu, 24 Nov 2022 17:37:51 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:23:55 GMT 

                                        
                                            
etag: "207da600a6688405aba5971926a253c6" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: _60K7gjqlqcheCFk20SVebtViW07NO5QX0TQOwtLNadJtmMvZu2sJA== 

                                        
                                            
age: 47713 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 24x24, components 3\012- data

                                                Size:   882

                                                Md5:    207da600a6688405aba5971926a253c6

                                                Sha1:   be25b2041157fbdff20e48d49e8063105c9e1f0a

                                                Sha256: 0cef7673d671be586ddb3eb27a367f1b260e900891d70509ca1cdc3fc04532ba

                                        
                                            GET /files/like_user_1.jpg HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
content-length: 995 

                                        
                                            
date: Thu, 24 Nov 2022 23:16:32 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:23:54 GMT 

                                        
                                            
etag: "c9bf35932083d0f7709882c8aef8c1a0" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: egyIvm_28RtAEi2h9tKypMLOoPI4a0ngjGPo_xjsvGcPmb1e7DzllA== 

                                        
                                            
age: 27392 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 24x24, components 3\012- data

                                                Size:   995

                                                Md5:    c9bf35932083d0f7709882c8aef8c1a0

                                                Sha1:   5c465b270a14ebbab5a66ddabd4387585df0f295

                                                Sha256: 0e3817ff1d2e1ed6dc399a22e4b49363f75d2a0a79eab5eb287a2d25efda80ae

                                        
                                            GET /files/footer_right.png HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
content-length: 2047 

                                        
                                            
date: Thu, 24 Nov 2022 23:16:32 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:23:44 GMT 

                                        
                                            
etag: "770d317bc385da31c2538c66c7ff9404" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: zDpVPazcdfzYEepZzbK7XhXwaTpwsXXFFuR7uwyrct53LUboex0ggQ== 

                                        
                                            
age: 27392 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 76 x 30, 8-bit colormap, non-interlaced\012- data

                                                Size:   2047

                                                Md5:    770d317bc385da31c2538c66c7ff9404

                                                Sha1:   2f9472649ba239b64423c99b995ee4d7be6b715e

                                                Sha256: 6092e790e8edcbe2cf814095a5efd7c1fc0317af4673855e4a9a2b0e0f694e93

                                        
                                            GET /files/za11.jpg HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
content-length: 1657 

                                        
                                            
date: Thu, 24 Nov 2022 23:16:32 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:24:04 GMT 

                                        
                                            
etag: "4af9bd008e64101ac2709ecdf7714216" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: frs7Uw7FL46ceYe9tbsx5R60tm8m5G8j2Gh1UjqLlBdDIH8yREBrrw== 

                                        
                                            
age: 27392 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data

                                                Size:   1657

                                                Md5:    4af9bd008e64101ac2709ecdf7714216

                                                Sha1:   a537fea579d793385498fbf11f0ff116b52f2157

                                                Sha256: c30e8c2727aef24fffca360d8781dd4666748b3b379491eb0a7d2bd7905604ce

                                        
                                            GET /files/notify_2x.png HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
content-length: 279 

                                        
                                            
date: Thu, 24 Nov 2022 17:37:51 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:23:59 GMT 

                                        
                                            
etag: "9835411adc549e17f7cfdc83a2e4aa42" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: B3yJm3MB07r_WV6vbJ7D2-pFsTnbcShwH-AQHnoyt0xBTuXEb_O1rQ== 

                                        
                                            
age: 47713 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 36 x 32, 8-bit colormap, non-interlaced\012- data

                                                Size:   279

                                                Md5:    9835411adc549e17f7cfdc83a2e4aa42

                                                Sha1:   c90593f808c84297502be1bb7bd4a524fc74e5a7

                                                Sha256: 6314ac94872c76d8fba23bba062b0084de4902a7465c27e24c69f22329abf6dc

                                        
                                            GET /files/za16.jpg HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
content-length: 1222 

                                        
                                            
date: Thu, 24 Nov 2022 17:37:51 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:23:34 GMT 

                                        
                                            
etag: "c7168e3bc82112a123c5ff4591a8f801" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: zyjWaLBWkQEyGNH0IyN_2m6f7cLTw162lBgAgqYT-IV2eoApnAPLwQ== 

                                        
                                            
age: 47713 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data

                                                Size:   1222

                                                Md5:    c7168e3bc82112a123c5ff4591a8f801

                                                Sha1:   241af8eb62b54f851da7631f440b1057ce2e69a0

                                                Sha256: 139b3d210ff37135298b973f83d341a5a8511f3b0250e30ee73d2d092f243008

                                        
                                            GET /files/menu_2x.png HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
content-length: 156 

                                        
                                            
date: Thu, 24 Nov 2022 23:16:32 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:23:58 GMT 

                                        
                                            
etag: "ab76dd7d2f4b9db14ed75a76107598ce" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: vWqkjFgcpi70VYuJFed80m61fzRtc1mBXCzYNoU8XWg467KN1frlpA== 

                                        
                                            
age: 27392 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 40 x 36, 4-bit colormap, non-interlaced\012- data

                                                Size:   156

                                                Md5:    ab76dd7d2f4b9db14ed75a76107598ce

                                                Sha1:   ba50ae179973afebfccbb1fe8b4566d94b54a814

                                                Sha256: 2d19d22c105a43bfcd4dfc2271980939375ef21e09489c489bcfc9b94eb15bef

                                        
                                            GET /files/za12.jpg HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
content-length: 1469 

                                        
                                            
date: Thu, 24 Nov 2022 23:16:32 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:24:06 GMT 

                                        
                                            
etag: "b1f7aea5a2798288d0bf31e794ec56d7" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: yRPNOy5mR58Ikurb0pw79wqEZ33ZRwX967Aqf2jBlAjs-cL0y--E-w== 

                                        
                                            
age: 27392 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data

                                                Size:   1469

                                                Md5:    b1f7aea5a2798288d0bf31e794ec56d7

                                                Sha1:   a99e224dbad2c3935553b132f6e4f5bf67a6d872

                                                Sha256: 3c88444f9edf2ac7dcf69f6c276705cf0118831317d35c56d7354cb3ff2b90c1

                                        
                                            GET /pfe/current/micro.tag.min.js?z=5033323&sw=/sw-check-permissions-b79d2.js HTTP/1.1 

                                        
                                            
Host: oungimuk.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         139.45.197.251

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 25 Nov 2022 06:53:03 GMT 

                                        
                                            
last-modified: Thu, 24 Nov 2022 15:53:54 GMT 

                                        
                                            
etag: W/"637f9392-12fca" 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
cache-control: no-cache 

                                        
                                            
pragma: no-cache 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   27818

                                                Md5:    1a0e9cbd49ce4cf2c0d90f71d6add0a5

                                                Sha1:   7d7b6acd35aa18efd9b8b1372a9b8b32478476e6

                                                Sha256: ef429a76d36d0d5eb627a679bc8e39bd9ea8e9fa8eca714239eb478b16e483b9

                                        
                                            GET /files/i12-g.png HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
content-length: 216231 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:23:50 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Fri, 25 Nov 2022 06:53:04 GMT 

                                        
                                            
etag: "f76249ee869540910a93722da57fc89d" 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-cache: RefreshHit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: ImF_EQSYlJw7oPqjvSrykCIY7CqB2fApZmzPfzCL1D0o3MzX8P1s_Q== 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 470 x 594, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   216231

                                                Md5:    f76249ee869540910a93722da57fc89d

                                                Sha1:   7d4d342200e8127cc20c207cbf37d1aedc0d3a73

                                                Sha256: f3d89b5e24cac5f0f37f4663e6978847ff8bcee57323f174e9a44dd02cd02c9b

                                        
                                            GET /files/i12o.png HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
content-length: 179933 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:23:53 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Fri, 25 Nov 2022 06:53:04 GMT 

                                        
                                            
etag: "f5f152667e46ff2539e8a6fb07cc5b4f" 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-cache: RefreshHit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: WGQrtHhSHmCwCU8IdkA8qg_10bWF0uUZxbAFTbDFrIKAf1N0-AGrQw== 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 470 x 594, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   179933

                                                Md5:    f5f152667e46ff2539e8a6fb07cc5b4f

                                                Sha1:   0962c219fc3077f6776f79bfa452696363d92945

                                                Sha256: b38bf1b539778d26d1c69dc3e6ca8aab8259df7355a38098c77da98afae2e8dc

                                        
                                            GET /files/pw_i12.png HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
content-length: 102758 

                                        
                                            
date: Fri, 25 Nov 2022 06:53:04 GMT 

                                        
                                            
last-modified: Fri, 08 Apr 2022 00:24:02 GMT 

                                        
                                            
etag: "3ac0108b62f1b33f8dea072aac19d890" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: jRNNAfP4AuSG9w6M37_nDiIkRymJuGHjKWd5DViNt0XGhLAd0beOfg== 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 501 x 501, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   102758

                                                Md5:    3ac0108b62f1b33f8dea072aac19d890

                                                Sha1:   398b6c695cd6c5c53b7e82716e83c4a79fcc3715

                                                Sha256: 0ee94d54673adfbf94f2dbf7c1addb124e4fc7da233061853c21e6573ac02c3f

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69" 

                                        
                                            
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9349 

                                        
                                            
Expires: Fri, 25 Nov 2022 09:28:54 GMT 

                                        
                                            
Date: Fri, 25 Nov 2022 06:53:05 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    b75c00c21f5854618bc06d14b8d83c40

                                                Sha1:   ae14f585ae9682e6c2fad146c12c00ee4d83e8f3

                                                Sha256: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69" 

                                        
                                            
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9349 

                                        
                                            
Expires: Fri, 25 Nov 2022 09:28:54 GMT 

                                        
                                            
Date: Fri, 25 Nov 2022 06:53:05 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    b75c00c21f5854618bc06d14b8d83c40

                                                Sha1:   ae14f585ae9682e6c2fad146c12c00ee4d83e8f3

                                                Sha256: a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7589 

                                        
                                            
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: brr5zH4qoAMF79Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: ZtjzvMh_vqVaOqm8xPfZ2EWGGl0X7Iv8GK40Z32EbKM4wk6tGPnlYA== 

                                        
                                            
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 24 Nov 2022 15:20:03 GMT 

                                        
                                            
age: 55982 

                                        
                                            
etag: "22884cbc78622d6f78c1c3397c9b440946144a99" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7589

                                                Md5:    06c6e720bc9900b38e88cd72f739603e

                                                Sha1:   22884cbc78622d6f78c1c3397c9b440946144a99

                                                Sha256: 8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10679 

                                        
                                            
x-amzn-requestid: aec8d040-d4e6-4185-b71e-7c049617ebc5 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: b4J3VEM5IAMFtcg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-637989c8-42b520ea3af2a2086ad416ad;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 20 Nov 2022 01:58:32 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: GkCprkFbPK6I-bo5k-rs37xaRDpqgUYbOydu2fd5-fTwqQ-d5lWlWw== 

                                        
                                            
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 25 Nov 2022 05:12:48 GMT 

                                        
                                            
age: 6017 

                                        
                                            
etag: "2ec124224738807229328a3ade6ca493ccf4b287" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10679

                                                Md5:    e2580ebded0a32ceecc3083ae1db2b37

                                                Sha1:   2ec124224738807229328a3ade6ca493ccf4b287

                                                Sha256: 010eeda33c923e2166851da1e131dcc21419d1f4f28995617ca93332ce4be08c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10950 

                                        
                                            
x-amzn-requestid: 9bb73841-83d9-48b2-8c79-f00a57612b4a 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cFNstFeZoAMFopQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-637ec31d-4e6aafd367c7740c77df133b;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 24 Nov 2022 01:04:30 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: Flw9EdzENUCOukD9HilOxntWCGlJbRReExn8Wb6p7bIUx8iSeIg1xg== 

                                        
                                            
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 24 Nov 2022 07:43:51 GMT 

                                        
                                            
age: 83354 

                                        
                                            
etag: "18800e21d05596f7b64213072dee7dda5c1faf61" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10950

                                                Md5:    4abf25d4a15ce58edadd54994b3434a2

                                                Sha1:   18800e21d05596f7b64213072dee7dda5c1faf61

                                                Sha256: 633138e70f43e2be9cc447967044c4070bfc4d9285e5228361bebe255dc286e2

                                        
                                            GET /home_v2.html?pw=ip12&click=www.mrktgtrck.me&campaign_id=da1862c2-ff22-471f-a47c-614d42082680&landing_name=dynamic%20roullette%20ip12&bemobdata=c%3Dda1862c2-ff22-471f-a47c-614d42082680..l%3Dc39de364-e811-4881-81c6-65495dba935e..a%3D0..b%3D0 HTTP/1.1 

                                        
                                            
Host: za.roulletewin.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         54.230.111.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html

                                        

                                        
                                            
date: Thu, 24 Nov 2022 23:16:31 GMT 

                                        
                                            
last-modified: Tue, 19 Apr 2022 11:43:45 GMT 

                                        
                                            
etag: W/"1b1b982b7c03eed5a3e28ca4da549fb7" 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-encoding: br 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: cG0tBALgl_XYJZt1JgH1k6Mno0_T7gwnOJr3E31C7JnbeCQOWl3uug== 

                                        
                                            
age: 27393 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	www.mrktgtrck.me/go/da1862c2-ff22-471f-a47c-614d42082680
IP	3.70.16.242 (Germany)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-25 06:53:13 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	1 Scam / Brand infringement
Tags	None

Overview

Domain Summary (11)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.70.16.242

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: mrktgtrck.me

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (16)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 4fe905d57e93e949e2d5e40cfb9b1976869fcf0636dda9881cb23bd3d80f54e3

Executed Writes (9)

#1 JavaScript::Write (size: 6) - SHA256: e21f3f372a46d4be7b49f6809fc91baefeadae004af06485518e124a142c0271

#2 JavaScript::Write (size: 13) - SHA256: 7315a7637b82fbec9defde9d563c0acb383369fc9acaafd4251ca5ddf818af6b

#3 JavaScript::Write (size: 30) - SHA256: 567662d7d6acfa4bb3eb39b14a73490fdb82f82277e5e10ae4163e6b600f123f

#4 JavaScript::Write (size: 11) - SHA256: 0342d5c5dcf9f0eb86987d24682348de2daa97c02535f4fb307f77fec9faa3b2

#5 JavaScript::Write (size: 11) - SHA256: 3982730cff060e8a80aef0c0236b0442f3f52b0453216f72b8a922fd28d7bf40

#6 JavaScript::Write (size: 24) - SHA256: 8ed6d6b47a1e153d7ea40e25954afcc7eb64ebc2731431a63a311b58a1acec8e

#7 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

#8 JavaScript::Write (size: 25) - SHA256: 27b128aabd41224cbb8c3595621b5a4f4328a431ac594765713f2fefc7d08a38

#9 JavaScript::Write (size: 11) - SHA256: e000a8123f92ad32a925afa62701d2d8f59ea2ac9f43c853a694a611c328fce1

HTTP Transactions (43)

Overview

Domain Summary (11)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.70.16.242

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: mrktgtrck.me

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (16)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 4fe905d57e93e949e2d5e40cfb9b1976869fcf0636dda9881cb23bd3d80f54e3

Executed Writes (9)

#1 JavaScript::Write (size: 6) - SHA256: e21f3f372a46d4be7b49f6809fc91baefeadae004af06485518e124a142c0271

#2 JavaScript::Write (size: 13) - SHA256: 7315a7637b82fbec9defde9d563c0acb383369fc9acaafd4251ca5ddf818af6b

#3 JavaScript::Write (size: 30) - SHA256: 567662d7d6acfa4bb3eb39b14a73490fdb82f82277e5e10ae4163e6b600f123f

#4 JavaScript::Write (size: 11) - SHA256: 0342d5c5dcf9f0eb86987d24682348de2daa97c02535f4fb307f77fec9faa3b2

#5 JavaScript::Write (size: 11) - SHA256: 3982730cff060e8a80aef0c0236b0442f3f52b0453216f72b8a922fd28d7bf40

#6 JavaScript::Write (size: 24) - SHA256: 8ed6d6b47a1e153d7ea40e25954afcc7eb64ebc2731431a63a311b58a1acec8e

#7 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

#8 JavaScript::Write (size: 25) - SHA256: 27b128aabd41224cbb8c3595621b5a4f4328a431ac594765713f2fefc7d08a38

#9 JavaScript::Write (size: 11) - SHA256: e000a8123f92ad32a925afa62701d2d8f59ea2ac9f43c853a694a611c328fce1

HTTP Transactions (43)

Network Intrusion Detection Systems