Overview

URLwww.mrktgtrck.me/go/da1862c2-ff22-471f-a47c-614d42082680
IP 3.70.16.242 (Germany)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-25 06:53:13 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts
1
Scam / Brand infringement
Tags None

Domain Summary (11)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (7) 344 No data No data 23.36.76.226
za.roulletewin.online (21) 0 2022-06-02 19:12:30 UTC 2022-11-22 13:59:05 UTC 54.230.111.14 Unknown ranking
oungimuk.net (1) 335656 2021-02-10 04:25:40 UTC 2022-11-24 19:58:14 UTC 139.45.197.251
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
www.mrktgtrck.me (1) 0 No data No data 3.70.16.242 Unknown ranking
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-24 05:36:55 UTC 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-24 05:30:55 UTC 34.117.237.239
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.156
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 35.160.97.225

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-25 2 www.mrktgtrck.me/go/da1862c2-ff22-471f-a47c-614d42082680 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.70.16.242
Date UQ / IDS / BL URL IP
2023-02-05 14:14:50 +0000 0 - 0 - 12 reminderset.com/go/dc26c419-4bb2-4522-a4df-b5 (...) 3.70.16.242
2023-02-05 13:57:18 +0000 0 - 0 - 3 win.2023prizes.com/go/192a5527-47b3-47b7-828e (...) 3.70.16.242
2023-02-05 12:11:27 +0000 0 - 0 - 2 n1sav.bemobtrcks.com/go/0aba6ff1-8137-4a65-96 (...) 3.70.16.242
2023-02-05 12:10:23 +0000 0 - 0 - 4 www.telera.site/go/1eb82493-107a-43b1-9f5a-5c (...) 3.70.16.242
2023-02-05 11:58:05 +0000 0 - 0 - 3 ss.redirectsstm.click/go/9d3cfb88-732e-4913-a (...) 3.70.16.242


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-02-05 15:01:55 +0000 0 - 1 - 0 www.digital4trade.it/?mwscanparam=1675609287 52.16.126.4
2023-02-05 15:01:37 +0000 0 - 0 - 2 furned-mashorses.com/91a2b9e2-d005-4c9d-b220- (...) 18.193.235.10
2023-02-05 15:00:51 +0000 0 - 0 - 2 ads.istngo.com/c25d799b-b132-4db1-9fea-794ef4 (...) 18.195.123.247
2023-02-05 14:58:07 +0000 0 - 0 - 3 www.mysexymatches.com/c/ce443e09abe04b3a 52.17.88.125
2023-02-05 14:54:43 +0000 0 - 1 - 0 invle.co/cle5n5g 3.1.145.215


Last 5 reports on domain: mrktgtrck.me
Date UQ / IDS / BL URL IP
2023-02-04 09:59:01 +0000 0 - 0 - 3 www.mrktgtrck.me/go/8ef13fab-76dd-451f-8116-8 (...) 3.70.16.242
2023-01-26 11:10:39 +0000 0 - 0 - 1 www.mrktgtrck.me/go/da1862c2-ff22-471f-a47c-6 (...) 3.70.16.242
2022-12-25 21:56:15 +0000 0 - 0 - 2 www.mrktgtrck.me/go/aa34e98f-d5d5-4750-8a04-2 (...) 3.70.16.242
2022-12-24 08:03:17 +0000 0 - 0 - 1 www.mrktgtrck.me/go/9f126e50-8eb5-4d59-bef1-f (...) 3.70.16.242
2022-12-23 22:56:55 +0000 0 - 0 - 2 www.mrktgtrck.me/go/aa34e98f-d5d5-4750-8a04-2 (...) 3.70.16.242


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-05 13:59:46 +0000 1 - 0 - 1 i.generousglimmeringmobile.shop/wbiwxb/i14s22 (...) 104.16.118.67
2023-02-05 10:53:36 +0000 1 - 0 - 1 47.winprizes147.digital/mx2/mxnotix23.html 217.69.14.8
2023-02-05 10:40:19 +0000 1 - 0 - 12 zmforever.digital/alwheelpropzm/index.html?br (...) 217.69.13.14
2023-02-05 08:54:51 +0000 1 - 0 - 0 44.winprizes544.digital/myaff2icu/index.php 45.76.148.82
2023-02-05 08:04:34 +0000 1 - 0 - 12 semegadate.digital/alwheeelpropse/index.html? (...) 217.69.13.14

JavaScript

Executed Scripts (16)

Executed Evals (1)
#1 JavaScript::Eval (size: 80) - SHA256: 4fe905d57e93e949e2d5e40cfb9b1976869fcf0636dda9881cb23bd3d80f54e3
(() => {
    const a = async
    function name() {};
    window['75ds2lbrd7x'] = true;
})()

Executed Writes (9)
#1 JavaScript::Write (size: 6) - SHA256: e21f3f372a46d4be7b49f6809fc91baefeadae004af06485518e124a142c0271
Friday
#2 JavaScript::Write (size: 13) - SHA256: 7315a7637b82fbec9defde9d563c0acb383369fc9acaafd4251ca5ddf818af6b
iPhone 12 Pro
#3 JavaScript::Write (size: 30) - SHA256: 567662d7d6acfa4bb3eb39b14a73490fdb82f82277e5e10ae4163e6b600f123f
iPhone 12 Pro 64 GB(Space Grey)
#4 JavaScript::Write (size: 11) - SHA256: 0342d5c5dcf9f0eb86987d24682348de2daa97c02535f4fb307f77fec9faa3b2
22 November
#5 JavaScript::Write (size: 11) - SHA256: 3982730cff060e8a80aef0c0236b0442f3f52b0453216f72b8a922fd28d7bf40
21 November
#6 JavaScript::Write (size: 24) - SHA256: 8ed6d6b47a1e153d7ea40e25954afcc7eb64ebc2731431a63a311b58a1acec8e
Friday, 25 November 2022
#7 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
#8 JavaScript::Write (size: 25) - SHA256: 27b128aabd41224cbb8c3595621b5a4f4328a431ac594765713f2fefc7d08a38
iPhone 12 Pro 64 GB(White)
#9 JavaScript::Write (size: 11) - SHA256: e000a8123f92ad32a925afa62701d2d8f59ea2ac9f43c853a694a611c328fce1
23 November


HTTP Transactions (43)


Request Response
                                        
                                            GET /go/da1862c2-ff22-471f-a47c-614d42082680 HTTP/1.1 
Host: www.mrktgtrck.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         3.70.16.242
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Fri, 25 Nov 2022 06:53:02 GMT
Content-Length: 614
Connection: keep-alive
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
Access-Control-Allow-Origin: *
Location: https://za.roulletewin.online/home_v2.html?pw=ip12&click=www.mrktgtrck.me&campaign_id=da1862c2-ff22-471f-a47c-614d42082680&landing_name=dynamic%20roullette%20ip12&bemobdata=c%3Dda1862c2-ff22-471f-a47c-614d42082680..l%3Dc39de364-e811-4881-81c6-65495dba935e..a%3D0..b%3D0
Set-Cookie: bemob-uniq-visit:da1862c2-ff22-471f-a47c-614d42082680=1; Domain=www.mrktgtrck.me; Path=/; Expires=Sat, 26 Nov 2022 06:53:02 GMT; HttpOnly bemob-rotation:da1862c2-ff22-471f-a47c-614d42082680:random:d83b0eed9d4800d6bd3927ed31df2fe4=0-2-0; Domain=www.mrktgtrck.me; Path=/; Expires=Sat, 26 Nov 2022 06:53:02 GMT; HttpOnly bemob-track-url=https%3A%2F%2Fza.roulletewin.online%2Fhome_v2.html%3Fpw%3Dip12%26click%3Dwww.mrktgtrck.me%26campaign_id%3Dda1862c2-ff22-471f-a47c-614d42082680%26landing_name%3Ddynamic%2520roullette%2520ip12%26bemobdata%3Dc%253Dda1862c2-ff22-471f-a47c-614d42082680..l%253Dc39de364-e811-4881-81c6-65495dba935e..a%253D0..b%253D0; Domain=www.mrktgtrck.me; Path=/; Expires=Sat, 26 Nov 2022 06:53:02 GMT; HttpOnly
Vary: Accept
X-Response-Time: 46.133ms
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (614), with no line terminators
Size:   614
Md5:    2ac1918b73fe6c01b96a92a5e5bf7ffc
Sha1:   c560eb22739219a2ebb5d926f3f47997ea2d2e4e
Sha256: 189f94a430115f85da7a18a16e15a3dbfcdd6a6481b83a52cd5b2b2740701214

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6524
Expires: Fri, 25 Nov 2022 08:41:46 GMT
Date: Fri, 25 Nov 2022 06:53:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4742
Cache-Control: max-age=104231
Date: Fri, 25 Nov 2022 06:53:02 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:50:13 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 06:19:04 GMT
cache-control: public,max-age=3600
age: 2038
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5420
Expires: Fri, 25 Nov 2022 08:23:22 GMT
Date: Fri, 25 Nov 2022 06:53:02 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 8ubx4Y5tsVzJ5BruFMUuavlRom3U2TmyG3fUFn9ee0Cz/4b3N39ALz0tJRHGBF81oSBQ9DNob60=
x-amz-request-id: XVVS75KV3DNRHFDW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 06:43:44 GMT
age: 558
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 25 Nov 2022 06:53:02 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=146991
Date: Fri, 25 Nov 2022 06:53:03 GMT
Etag: "6380017e-1d7"
Expires: Sat, 26 Nov 2022 23:42:54 GMT
Last-Modified: Thu, 24 Nov 2022 23:42:54 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fHdtO0SviJTNkTPcCT_XCuhvvSzpy6TXsnMVoRJHVHB3I31uhnBirA==

                                        
                                            GET /files/like_user_2.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 882
date: Thu, 24 Nov 2022 17:37:51 GMT
last-modified: Fri, 08 Apr 2022 00:23:55 GMT
etag: "207da600a6688405aba5971926a253c6"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _60K7gjqlqcheCFk20SVebtViW07NO5QX0TQOwtLNadJtmMvZu2sJA==
age: 47713
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 24x24, components 3\012- data
Size:   882
Md5:    207da600a6688405aba5971926a253c6
Sha1:   be25b2041157fbdff20e48d49e8063105c9e1f0a
Sha256: 0cef7673d671be586ddb3eb27a367f1b260e900891d70509ca1cdc3fc04532ba
                                        
                                            GET /files/za15.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 1408
date: Thu, 24 Nov 2022 17:37:51 GMT
last-modified: Fri, 08 Apr 2022 00:24:10 GMT
etag: "9994be8f739e48d937647ce262bb06d6"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3zbkVxaSWYqHCHHbPCptyQmoiAsJIG1hWcQL46hv43aVJ1GTr5_J7w==
age: 47713
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1408
Md5:    9994be8f739e48d937647ce262bb06d6
Sha1:   c5feb34789fe8294e2d603439db5d2d45aa7506c
Sha256: fb6321f2b846c1081c201fa6c2c8609480ff7bd6011335a41873f7f5e20743ea
                                        
                                            GET /files/like_user_1.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 995
date: Thu, 24 Nov 2022 23:16:32 GMT
last-modified: Fri, 08 Apr 2022 00:23:54 GMT
etag: "c9bf35932083d0f7709882c8aef8c1a0"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: egyIvm_28RtAEi2h9tKypMLOoPI4a0ngjGPo_xjsvGcPmb1e7DzllA==
age: 27392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 24x24, components 3\012- data
Size:   995
Md5:    c9bf35932083d0f7709882c8aef8c1a0
Sha1:   5c465b270a14ebbab5a66ddabd4387585df0f295
Sha256: 0e3817ff1d2e1ed6dc399a22e4b49363f75d2a0a79eab5eb287a2d25efda80ae
                                        
                                            GET /files/za14.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 1270
date: Thu, 24 Nov 2022 17:37:51 GMT
last-modified: Fri, 08 Apr 2022 00:24:08 GMT
etag: "8cea16a3748b83532a70ed7818d3d91e"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xVn-HxeQXTi80sXiV1ogke5IpyWPpi48635r1VnTyirt0y89FQbuRw==
age: 47713
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1270
Md5:    8cea16a3748b83532a70ed7818d3d91e
Sha1:   64002f94b5fdd4475da461fb4121e8d72b33cc2a
Sha256: 2cbcd11d38c74b82fe88e03d700f292ec90f35ffeae98f2f6e244e6258b02525
                                        
                                            GET /files/footer_right.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2047
date: Thu, 24 Nov 2022 23:16:32 GMT
last-modified: Fri, 08 Apr 2022 00:23:44 GMT
etag: "770d317bc385da31c2538c66c7ff9404"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zDpVPazcdfzYEepZzbK7XhXwaTpwsXXFFuR7uwyrct53LUboex0ggQ==
age: 27392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 76 x 30, 8-bit colormap, non-interlaced\012- data
Size:   2047
Md5:    770d317bc385da31c2538c66c7ff9404
Sha1:   2f9472649ba239b64423c99b995ee4d7be6b715e
Sha256: 6092e790e8edcbe2cf814095a5efd7c1fc0317af4673855e4a9a2b0e0f694e93
                                        
                                            GET /files/clip_footer_3.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2445
date: Thu, 24 Nov 2022 17:37:51 GMT
last-modified: Fri, 08 Apr 2022 00:23:41 GMT
etag: "0650d2120ba512d13badb739eb3bcb2f"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _nWQH6Eqgf3I8NBDTQqU-4aNtIryevJI2m5ryy1ZtSUyrl613NB9PA==
age: 47713
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data
Size:   2445
Md5:    0650d2120ba512d13badb739eb3bcb2f
Sha1:   ca501dbce36ab62896b57c043b7690bfc1b7f0c3
Sha256: 292ce5b88f14029a90f59f9ac004b7aeeb353b43637870ff4b19ddd0228ab4c4
                                        
                                            GET /files/za11.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 1657
date: Thu, 24 Nov 2022 23:16:32 GMT
last-modified: Fri, 08 Apr 2022 00:24:04 GMT
etag: "4af9bd008e64101ac2709ecdf7714216"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: frs7Uw7FL46ceYe9tbsx5R60tm8m5G8j2Gh1UjqLlBdDIH8yREBrrw==
age: 27392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1657
Md5:    4af9bd008e64101ac2709ecdf7714216
Sha1:   a537fea579d793385498fbf11f0ff116b52f2157
Sha256: c30e8c2727aef24fffca360d8781dd4666748b3b379491eb0a7d2bd7905604ce
                                        
                                            GET /files/za13.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 1231
date: Thu, 24 Nov 2022 23:16:32 GMT
last-modified: Fri, 08 Apr 2022 00:24:07 GMT
etag: "294fa989a992b50b015bbf18f698a6f4"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FouQlkSD2EVfjFbW6kNds2uZajVflJnpJ3vrRklswjvIFodmiOZUSw==
age: 27392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1231
Md5:    294fa989a992b50b015bbf18f698a6f4
Sha1:   a0988dda1161cf5340564db19a3d71af630a1b6f
Sha256: 76a25a938b3717b3580b0c4f7a892aa487b1addf6e48fbdacc2f989223045965
                                        
                                            GET /files/notify_2x.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 279
date: Thu, 24 Nov 2022 17:37:51 GMT
last-modified: Fri, 08 Apr 2022 00:23:59 GMT
etag: "9835411adc549e17f7cfdc83a2e4aa42"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B3yJm3MB07r_WV6vbJ7D2-pFsTnbcShwH-AQHnoyt0xBTuXEb_O1rQ==
age: 47713
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 36 x 32, 8-bit colormap, non-interlaced\012- data
Size:   279
Md5:    9835411adc549e17f7cfdc83a2e4aa42
Sha1:   c90593f808c84297502be1bb7bd4a524fc74e5a7
Sha256: 6314ac94872c76d8fba23bba062b0084de4902a7465c27e24c69f22329abf6dc
                                        
                                            GET /files/action_icons_20px_2x.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 1688
date: Thu, 24 Nov 2022 23:16:32 GMT
last-modified: Fri, 08 Apr 2022 00:23:39 GMT
etag: "aad03737463aa556537bb7f389c63b0d"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XRIIU5OE8AOCcVBR_8BqnV1XW3HONBPnc4YjMwnv8_jGyzm5SHWpRg==
age: 27392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Size:   1688
Md5:    aad03737463aa556537bb7f389c63b0d
Sha1:   ce66e06c100177343e07601a8d08c64cbbfcbf40
Sha256: 37eb737c2d454b3ad7637228a7c8bebf3b327796f1cb74605e148b2165671ffa
                                        
                                            GET /files/za16.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 1222
date: Thu, 24 Nov 2022 17:37:51 GMT
last-modified: Fri, 08 Apr 2022 00:23:34 GMT
etag: "c7168e3bc82112a123c5ff4591a8f801"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zyjWaLBWkQEyGNH0IyN_2m6f7cLTw162lBgAgqYT-IV2eoApnAPLwQ==
age: 47713
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1222
Md5:    c7168e3bc82112a123c5ff4591a8f801
Sha1:   241af8eb62b54f851da7631f440b1057ce2e69a0
Sha256: 139b3d210ff37135298b973f83d341a5a8511f3b0250e30ee73d2d092f243008
                                        
                                            GET /files/spin_prize2.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2902
date: Thu, 24 Nov 2022 23:16:32 GMT
last-modified: Fri, 08 Apr 2022 00:24:03 GMT
etag: "179983598c0105247ced371aa7a0c63d"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Rss5OE42F-hcxMPhnCNCk2QvQu6VVAskzv5kFV2eWOQ4zRN3EdN6xQ==
age: 27392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data
Size:   2902
Md5:    179983598c0105247ced371aa7a0c63d
Sha1:   579afe76b9fcb3282783e0f0a13d14af7317b1c1
Sha256: 35cc5a6a01986aaa5c716b507657218d84e871a2934964a9da0ef7cad8ce65b7
                                        
                                            GET /files/menu_2x.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 156
date: Thu, 24 Nov 2022 23:16:32 GMT
last-modified: Fri, 08 Apr 2022 00:23:58 GMT
etag: "ab76dd7d2f4b9db14ed75a76107598ce"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vWqkjFgcpi70VYuJFed80m61fzRtc1mBXCzYNoU8XWg467KN1frlpA==
age: 27392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 40 x 36, 4-bit colormap, non-interlaced\012- data
Size:   156
Md5:    ab76dd7d2f4b9db14ed75a76107598ce
Sha1:   ba50ae179973afebfccbb1fe8b4566d94b54a814
Sha256: 2d19d22c105a43bfcd4dfc2271980939375ef21e09489c489bcfc9b94eb15bef
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EB5B01642528CF47BDA8A0DAA19D02C30072EE492974D228FF6247CD8790D9D3"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11483
Expires: Fri, 25 Nov 2022 10:04:26 GMT
Date: Fri, 25 Nov 2022 06:53:03 GMT
Connection: keep-alive

                                        
                                            GET /files/za12.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 1469
date: Thu, 24 Nov 2022 23:16:32 GMT
last-modified: Fri, 08 Apr 2022 00:24:06 GMT
etag: "b1f7aea5a2798288d0bf31e794ec56d7"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yRPNOy5mR58Ikurb0pw79wqEZ33ZRwX967Aqf2jBlAjs-cL0y--E-w==
age: 27392
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1469
Md5:    b1f7aea5a2798288d0bf31e794ec56d7
Sha1:   a99e224dbad2c3935553b132f6e4f5bf67a6d872
Sha256: 3c88444f9edf2ac7dcf69f6c276705cf0118831317d35c56d7354cb3ff2b90c1
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 06:11:11 GMT
cache-control: public,max-age=3600
age: 2512
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /pfe/current/micro.tag.min.js?z=5033323&sw=/sw-check-permissions-b79d2.js HTTP/1.1 
Host: oungimuk.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         139.45.197.251
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 25 Nov 2022 06:53:03 GMT
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-12fca"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   27818
Md5:    1a0e9cbd49ce4cf2c0d90f71d6add0a5
Sha1:   7d7b6acd35aa18efd9b8b1372a9b8b32478476e6
Sha256: ef429a76d36d0d5eb627a679bc8e39bd9ea8e9fa8eca714239eb478b16e483b9
                                        
                                            GET /files/za17.jpg HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 1082
last-modified: Fri, 08 Apr 2022 00:23:36 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 06:53:04 GMT
etag: "7580401cffaa684e68a274e572984d0e"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mkDsaYb0CM02nxWsXG7C932cfMijDv2FUxwdbsQXAJAHMs79wgug7g==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size:   1082
Md5:    7580401cffaa684e68a274e572984d0e
Sha1:   5dc7412d1ad99cfdf429a2bb25b3c67c0c5e4bcc
Sha256: 8b8a98a1130580723db4df56c375be4e2efd1b175f8f02ae636f17ff68c79b7f
                                        
                                            GET /files/i12-g.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 216231
last-modified: Fri, 08 Apr 2022 00:23:50 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 06:53:04 GMT
etag: "f76249ee869540910a93722da57fc89d"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ImF_EQSYlJw7oPqjvSrykCIY7CqB2fApZmzPfzCL1D0o3MzX8P1s_Q==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 470 x 594, 8-bit/color RGBA, non-interlaced\012- data
Size:   216231
Md5:    f76249ee869540910a93722da57fc89d
Sha1:   7d4d342200e8127cc20c207cbf37d1aedc0d3a73
Sha256: f3d89b5e24cac5f0f37f4663e6978847ff8bcee57323f174e9a44dd02cd02c9b
                                        
                                            GET /files/comment_action_2x.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 637
last-modified: Fri, 08 Apr 2022 00:23:42 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 06:53:04 GMT
etag: "97594dddb34f0d898250bee4fda1c518"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cZPS3ZZRprvYd4Pp-tTNGafsP-F4VZK1P55unGdiTDBnE1gbANhH9Q==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data
Size:   637
Md5:    97594dddb34f0d898250bee4fda1c518
Sha1:   e4c0bd32d1e82e6435e9893a8b946e76f5239a5d
Sha256: aae9f320fa2facd07a569fe6ea8b9a2daa21129617c86898ce036f4a61129c60
                                        
                                            GET /files/i12o.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 179933
last-modified: Fri, 08 Apr 2022 00:23:53 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 06:53:04 GMT
etag: "f5f152667e46ff2539e8a6fb07cc5b4f"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WGQrtHhSHmCwCU8IdkA8qg_10bWF0uUZxbAFTbDFrIKAf1N0-AGrQw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 470 x 594, 8-bit/color RGBA, non-interlaced\012- data
Size:   179933
Md5:    f5f152667e46ff2539e8a6fb07cc5b4f
Sha1:   0962c219fc3077f6776f79bfa452696363d92945
Sha256: b38bf1b539778d26d1c69dc3e6ca8aab8259df7355a38098c77da98afae2e8dc
                                        
                                            GET /files/i12-s.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 221354
last-modified: Fri, 08 Apr 2022 00:23:51 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 06:53:04 GMT
etag: "af95538412b63f46d385060bcfc42614"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LSLEMe1XMMOZHc5MgZ76Xa0e4T71i8qzJzzVJvHqZb2LsUmvxwgBog==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 470 x 594, 8-bit/color RGBA, non-interlaced\012- data
Size:   221354
Md5:    af95538412b63f46d385060bcfc42614
Sha1:   a99dc95f13eb5c4721bd8a6b747262d7222fbc67
Sha256: 9e53464c36538aef413e048b343afd585b3ed47445c49add49ab5e21c9920b55
                                        
                                            GET /files/pw_i12.png HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 102758
date: Fri, 25 Nov 2022 06:53:04 GMT
last-modified: Fri, 08 Apr 2022 00:24:02 GMT
etag: "3ac0108b62f1b33f8dea072aac19d890"
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jRNNAfP4AuSG9w6M37_nDiIkRymJuGHjKWd5DViNt0XGhLAd0beOfg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 501 x 501, 8-bit/color RGBA, non-interlaced\012- data
Size:   102758
Md5:    3ac0108b62f1b33f8dea072aac19d890
Sha1:   398b6c695cd6c5c53b7e82716e83c4a79fcc3715
Sha256: 0ee94d54673adfbf94f2dbf7c1addb124e4fc7da233061853c21e6573ac02c3f
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iRRwMnSxFlOMB+MXZqaFig==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.160.97.225
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6cT1Ps2DvJZkreXibw0YAuNIv3k=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9349
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 06:53:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9349
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 06:53:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9349
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 06:53:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9349
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 06:53:05 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZtjzvMh_vqVaOqm8xPfZ2EWGGl0X7Iv8GK40Z32EbKM4wk6tGPnlYA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 15:20:03 GMT
age: 55982
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7589
Md5:    06c6e720bc9900b38e88cd72f739603e
Sha1:   22884cbc78622d6f78c1c3397c9b440946144a99
Sha256: 8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 17137
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3955
Md5:    4006a9037ab5f28dca62b0aa7a704c41
Sha1:   74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
Sha256: 556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10679
x-amzn-requestid: aec8d040-d4e6-4185-b71e-7c049617ebc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b4J3VEM5IAMFtcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637989c8-42b520ea3af2a2086ad416ad;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 01:58:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GkCprkFbPK6I-bo5k-rs37xaRDpqgUYbOydu2fd5-fTwqQ-d5lWlWw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 05:12:48 GMT
age: 6017
etag: "2ec124224738807229328a3ade6ca493ccf4b287"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10679
Md5:    e2580ebded0a32ceecc3083ae1db2b37
Sha1:   2ec124224738807229328a3ade6ca493ccf4b287
Sha256: 010eeda33c923e2166851da1e131dcc21419d1f4f28995617ca93332ce4be08c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1abe4f62-70d8-471a-89fc-79dd854e637c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10955
x-amzn-requestid: efabf5fa-f031-4249-8a2c-01dd55c11d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8JuxFj5oAMFvSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b232b-1a6f713b0674035c1a1b925a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:05:15 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: DLb4iXB5DlHVAliRxEaxufYLLVzNI44YLc7WqL0D5B062j53nTKo9A==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 13:42:52 GMT
age: 61813
etag: "9be5a5497a8566ea66e81765ef8566e6b716ab5b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10955
Md5:    7e97ba6c4c94a299553238e643a3acc7
Sha1:   9be5a5497a8566ea66e81765ef8566e6b716ab5b
Sha256: bda1bb57f0198e711c3018417513237b9533cfe2e5856ada5383f7461090f40a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10950
x-amzn-requestid: 9bb73841-83d9-48b2-8c79-f00a57612b4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFNstFeZoAMFopQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec31d-4e6aafd367c7740c77df133b;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:04:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Flw9EdzENUCOukD9HilOxntWCGlJbRReExn8Wb6p7bIUx8iSeIg1xg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:43:51 GMT
age: 83354
etag: "18800e21d05596f7b64213072dee7dda5c1faf61"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10950
Md5:    4abf25d4a15ce58edadd54994b3434a2
Sha1:   18800e21d05596f7b64213072dee7dda5c1faf61
Sha256: 633138e70f43e2be9cc447967044c4070bfc4d9285e5228361bebe255dc286e2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2351
x-amzn-requestid: 141bbf99-5d78-4b9c-a537-491718aee68a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b43YGE_SoAMFlbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d29a-00017cd344caea2b6408aeb3;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:09:14 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 1-8WM-7tNqakPDW9-K0GVbOKdotndEXj2QeJzw3cJol-g9TT5IVyOQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 16:45:53 GMT
age: 50832
etag: "41ef94d198bbf98185eb332a3b6934c3c26c3afc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2351
Md5:    66d06d3cac1784e4ce6c8c89c300f10a
Sha1:   41ef94d198bbf98185eb332a3b6934c3c26c3afc
Sha256: 55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3
                                        
                                            GET /home_v2.html?pw=ip12&click=www.mrktgtrck.me&campaign_id=da1862c2-ff22-471f-a47c-614d42082680&landing_name=dynamic%20roullette%20ip12&bemobdata=c%3Dda1862c2-ff22-471f-a47c-614d42082680..l%3Dc39de364-e811-4881-81c6-65495dba935e..a%3D0..b%3D0 HTTP/1.1 
Host: za.roulletewin.online
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         54.230.111.14
HTTP/2 200 OK
content-type: text/html
                                        
date: Thu, 24 Nov 2022 23:16:31 GMT
last-modified: Tue, 19 Apr 2022 11:43:45 GMT
etag: W/"1b1b982b7c03eed5a3e28ca4da549fb7"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cG0tBALgl_XYJZt1JgH1k6Mno0_T7gwnOJr3E31C7JnbeCQOWl3uug==
age: 27393
X-Firefox-Spdy: h2


--- Additional Info ---