r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b720c31d9c036cd2ef10e35fa29f5345
ac625d2e69284e5080bede4b37c31af62c26338b
323b76eceb5d3ad339a1c55bfa7eea4e39741258e08d5005b691f712a9e9c81c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "323B76ECEB5D3AD339A1C55BFA7EEA4E39741258E08D5005B691F712A9E9C81C"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11870
Expires: Sun, 06 Nov 2022 08:12:27 GMT
Date: Sun, 06 Nov 2022 04:54:37 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 72c64df35304c35cd95e4ed6e101e795
a39287987854d644a8da295da536fb31de8b44c1
a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 953
Cache-Control: max-age=103940
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 04:54:37 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 09:46:57 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 078950c3ba9ad01927f3da494b1d1de4
443c8a8247e4e3e04c14d21e0227fc4e8f396142
dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C"
Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11791
Expires: Sun, 06 Nov 2022 08:11:08 GMT
Date: Sun, 06 Nov 2022 04:54:37 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7L5L6IdraK4ZIVF7V42SB8kQC7Z8uHDf6dqUQ13CAetCRfR75U/EnAeARcQ5h9nlWvvIGMy1WoA=
x-amz-request-id: FKQ6AJHJ1XH7PTE2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 06 Nov 2022 04:10:18 GMT
age: 2659
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/index.php?city=Celina&brand=Desktop&model=Desktop&browser=Chrome&cep=g1ooZx3w3KaMjc6aOC5ZixV7F6d5Cs3M-lCs6cgUnZywGxo8oXGKoq04rHFavd20ZEbO2mTCvzINeUUKJNUcTA-KE2QIUlm5b3Z8WlsCym_5vHYZvNSv3sdPD5MiEOtqwW67bugWeUh5-3NtRqH8PNRvHHmXFrZtspcdAuBglBVuVIgG46N7qMkZJVdJRw61uY2R7aLqjtQiu_AWlZdJFSPXNYm9JpTj31hEZwMqdetHPbnZbqfyc-igdbIdy91ziQSp7hQQPygWO9nJdudq87vOKPpEyTvGeB7yb4KmbrZvRjOItshRRxLORQA03eRUxrIP9FQDPooMFaBBO3Ts_HyiK-YH-SZ6QhzBTQbDWQ-mDylKjro1zHJwvo0aAKCfbT1JW1Bn0a2_lF_ng6az4bTj_1E8VHL_Njo3zAW151Q&lptoken=166a6795718e228859c6
301 Moved Permanently 970 B URL HTTP/1.1 44.winprizes544.digital/myaff2icu/index.php?city=Celina&brand=Desktop&model=Desktop&browser=Chrome&cep=g1ooZx3w3KaMjc6aOC5ZixV7F6d5Cs3M-lCs6cgUnZywGxo8oXGKoq04rHFavd20ZEbO2mTCvzINeUUKJNUcTA-KE2QIUlm5b3Z8WlsCym_5vHYZvNSv3sdPD5MiEOtqwW67bugWeUh5-3NtRqH8PNRvHHmXFrZtspcdAuBglBVuVIgG46N7qMkZJVdJRw61uY2R7aLqjtQiu_AWlZdJFSPXNYm9JpTj31hEZwMqdetHPbnZbqfyc-igdbIdy91ziQSp7hQQPygWO9nJdudq87vOKPpEyTvGeB7yb4KmbrZvRjOItshRRxLORQA03eRUxrIP9FQDPooMFaBBO3Ts_HyiK-YH-SZ6QhzBTQbDWQ-mDylKjro1zHJwvo0aAKCfbT1JW1Bn0a2_lF_ng6az4bTj_1E8VHL_Njo3zAW151Q&lptoken=166a6795718e228859c6
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (637)
Hash d49fc39403aec1b47e68ece3ef359c5f
365e9d3234d4d8d3d0a951d12ff6f2e3eb5cad1e
a4a92adee9b13e31bd5106b8597700df26de4651b17efcee92b9b9b0db9790cb
GET /myaff2icu/index.php?city=Celina&brand=Desktop&model=Desktop&browser=Chrome&cep=g1ooZx3w3KaMjc6aOC5ZixV7F6d5Cs3M-lCs6cgUnZywGxo8oXGKoq04rHFavd20ZEbO2mTCvzINeUUKJNUcTA-KE2QIUlm5b3Z8WlsCym_5vHYZvNSv3sdPD5MiEOtqwW67bugWeUh5-3NtRqH8PNRvHHmXFrZtspcdAuBglBVuVIgG46N7qMkZJVdJRw61uY2R7aLqjtQiu_AWlZdJFSPXNYm9JpTj31hEZwMqdetHPbnZbqfyc-igdbIdy91ziQSp7hQQPygWO9nJdudq87vOKPpEyTvGeB7yb4KmbrZvRjOItshRRxLORQA03eRUxrIP9FQDPooMFaBBO3Ts_HyiK-YH-SZ6QhzBTQbDWQ-mDylKjro1zHJwvo0aAKCfbT1JW1Bn0a2_lF_ng6az4bTj_1E8VHL_Njo3zAW151Q&lptoken=166a6795718e228859c6 HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 06 Nov 2022 04:54:37 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 970
Connection: keep-alive
Location: https://44.winprizes544.digital/myaff2icu/index.php?city=Celina&brand=Desktop&model=Desktop&browser=Chrome&cep=g1ooZx3w3KaMjc6aOC5ZixV7F6d5Cs3M-lCs6cgUnZywGxo8oXGKoq04rHFavd20ZEbO2mTCvzINeUUKJNUcTA-KE2QIUlm5b3Z8WlsCym_5vHYZvNSv3sdPD5MiEOtqwW67bugWeUh5-3NtRqH8PNRvHHmXFrZtspcdAuBglBVuVIgG46N7qMkZJVdJRw61uY2R7aLqjtQiu_AWlZdJFSPXNYm9JpTj31hEZwMqdetHPbnZbqfyc-igdbIdy91ziQSp7hQQPygWO9nJdudq87vOKPpEyTvGeB7yb4KmbrZvRjOItshRRxLORQA03eRUxrIP9FQDPooMFaBBO3Ts_HyiK-YH-SZ6QhzBTQbDWQ-mDylKjro1zHJwvo0aAKCfbT1JW1Bn0a2_lF_ng6az4bTj_1E8VHL_Njo3zAW151Q&lptoken=166a6795718e228859c6
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:37 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash db63d54b77502dd6c7bdc792d4fd093e
026ad8186833988279468829c004c6e2a2f2626f
eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3689
Cache-Control: max-age=101619
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 04:54:37 GMT
Etag: "63661997-1d7"
Expires: Mon, 07 Nov 2022 09:08:16 GMT
Last-Modified: Sat, 05 Nov 2022 08:06:47 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ad54F3r9xu9Z9UPjxY5N9w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mPPExflV5nFWoG5rfjzDS9gzTNE=
44.winprizes544.digital/myaff2icu/pw_ix.png
200 OK 31 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/pw_ix.png
IP
File type PNG image data, 501 x 501, 8-bit colormap, non-interlaced\012- data
Hash 5fc015b94e8c0ea18422670e93b141ce
b578ad18a8ba581e6bb26598bc081496aaf24175
cb6830f49373a35ef541e1fc3de08e4fb1a99c2c7ada98025909669b30d4b8c4
GET /myaff2icu/pw_ix.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 31191
last-modified: Mon, 25 Apr 2022 03:27:17 GMT
etag: "79d7-5dd72273dd571"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/ixo.png
200 OK 14 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/ixo.png
IP
File type PNG image data, 165 x 331, 8-bit colormap, non-interlaced\012- data
Hash 227549843293c6fa24a792b54248ef39
366312180e142c472c250d53334bec00a2634f79
e79afff7ed20dae4001cd848396b37203f740cb03097d98a94d28e2874e743a8
GET /myaff2icu/ixo.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 14197
last-modified: Mon, 25 Apr 2022 03:27:12 GMT
etag: "3775-5dd7226e5f152"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/ix-s.png
200 OK 11 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/ix-s.png
IP
File type PNG image data, 150 x 236, 8-bit colormap, non-interlaced\012- data
Hash 77ce5723bbb951ae5b26478839f9f57e
a8748fea07c30d85a69ebfac68fb94746c063578
f13ca6df822b46229be1c93a01180de802cc7391e98e6b349e04d41bf947a4a0
GET /myaff2icu/ix-s.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 10582
last-modified: Mon, 25 Apr 2022 03:27:12 GMT
etag: "2956-5dd7226e4a932"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/ix-g.png
200 OK 11 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/ix-g.png
IP
File type PNG image data, 150 x 236, 8-bit colormap, non-interlaced\012- data
Hash 2c1edeb88c3c4e0f13ef4dd7809e9e61
99c3273103fc958c99ee9da9900ea78ea1fc517d
fc97772893ff2815057089661f7cb0755dd0b1e96af7b40a9ccc644dc88dd3e2
GET /myaff2icu/ix-g.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 10749
last-modified: Mon, 25 Apr 2022 03:27:12 GMT
etag: "29fd-5dd7226e39f91"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12658
Expires: Sun, 06 Nov 2022 08:25:37 GMT
Date: Sun, 06 Nov 2022 04:54:39 GMT
Connection: keep-alive
44.winprizes544.digital/myaff2icu/like_user_1.jpg
200 OK 1.3 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/like_user_1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 2aa0d43e70d60d76ac4bdff139f8c7cb
d7e3433297ad90f5d99249aee29b645265c9f3eb
e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /myaff2icu/like_user_1.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/jpeg
content-length: 1293
last-modified: Mon, 25 Apr 2022 03:27:12 GMT
etag: "50d-5dd7226eb8ed4"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12658
Expires: Sun, 06 Nov 2022 08:25:37 GMT
Date: Sun, 06 Nov 2022 04:54:39 GMT
Connection: keep-alive
44.winprizes544.digital/myaff2icu/like_user_2.jpg
200 OK 1.2 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/like_user_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash f9299c2023539a8f27a6e1b12ed260e5
046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2
ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /myaff2icu/like_user_2.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/jpeg
content-length: 1216
last-modified: Mon, 25 Apr 2022 03:27:12 GMT
etag: "4c0-5dd7226eca814"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/my11.jpg
200 OK 1.0 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/my11.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash ea5a480ce9f5175b1305da649659f3e2
a86b6693a567918d7c7f5b69ea09bc3b54ec8b08
657f339c517ce2e89a0355eb327a5532eec6b10a81fd1047c5a6b59c418f42d0
GET /myaff2icu/my11.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/jpeg
content-length: 1017
last-modified: Mon, 25 Apr 2022 03:27:13 GMT
etag: "3f9-5dd7226f38db7"
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3fDf4aoep5tTAusisXhIdAf0A6SbpM5fYtYaiXtNSb0-VRJo5nu8Vg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 06:27:59 GMT
age: 80800
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcc79e66d1e21452efb26d26650f6739
1f727a7ea032082658944cf4041686446fb6b5f2
af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 3a50374d-d90e-452e-bb89-82ca14c94b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJarpGtqIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-55c356475fb64e6625a338c7;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ry_OKFFZDdDoVya2hTxnFlDGtgoSw0JRqieDnCO4mSNFbgV-AuLE5Q==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:33 GMT
age: 25806
etag: "1f727a7ea032082658944cf4041686446fb6b5f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/my12.jpg
200 OK 1.4 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/my12.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash e9e838da5f1f374be3b7b620917a7f57
d0157bfc45aa1e2f291f7d9b12bff3000b86a112
9c5f1c0fafd56a61ce4bbfde6b287e2fb564718c46dbd825b243060cf4554cbc
GET /myaff2icu/my12.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/jpeg
content-length: 1358
last-modified: Mon, 25 Apr 2022 03:27:13 GMT
etag: "54e-5dd7226f49757"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/my13.jpg
200 OK 1.2 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/my13.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 57a0ced58ec3b95e82a5969855badac2
f180e3047a27ca9bec7b846ce96b273ac176f6b4
c8b5d9b1f95245213a1f0553ccae1140bf3b9b92ae2d6fffddfca138a1d0f8b4
GET /myaff2icu/my13.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/jpeg
content-length: 1241
last-modified: Mon, 25 Apr 2022 03:27:13 GMT
etag: "4d9-5dd7226f5c038"
accept-ranges: bytes
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1fca0567-0bda-4bac-bb89-67725f8861ba.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1fca0567-0bda-4bac-bb89-67725f8861ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 011dfec799b7ed1ef3699e117fb952c9
589b1281b11a3f0fba3a1445674d45404e49904b
3af8e1de964a857b56aa5cc59a0279779f29c44f57698f96ad728347eb3675a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1fca0567-0bda-4bac-bb89-67725f8861ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9634
x-amzn-requestid: 1247a571-4ebd-42e3-9fc0-f0da104a24fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJarpGSWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-6f1bcfbd6f12dfd00418b844;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:43 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VFMcJdDPcwHmVZycXB0FC9yFjIFxuN4ylvBioufWLYCDXIlA9fx-0w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:03:47 GMT
age: 24652
etag: "589b1281b11a3f0fba3a1445674d45404e49904b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93aada35cf6b5ccf56d7c8c49e566a1e
349f301eab8e4cd3732e9b0fbd1675bbbe3e969b
2285236779612c298f54306c6237df079a3329daa415c3f3a9015bf2a75f99aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9331
x-amzn-requestid: d67eca4f-66a8-4366-b2d8-fb424e77b438
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJb3lHQmIAMFemg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d9c9-77519cf22b23b7e00a23cacc;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:46:49 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ZiP3LoPE9a2aP16DN-jBzPfGPS_uW4M_qtJ3ilw26cxK6w6mWJOxPQ==
via: 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 22:12:38 GMT
etag: "349f301eab8e4cd3732e9b0fbd1675bbbe3e969b"
content-type: image/jpeg
age: 24121
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8df47f1e-c13a-452f-b0e2-28c141dbb191.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8df47f1e-c13a-452f-b0e2-28c141dbb191.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b18a8c9f5539ce33476f843f5811e01d
11d1f2ce72d2aa6686c79f777cd0bdb4ddeb681b
fc20e507eedccb52078979f2132434b11b9d50d917cab512d8e0c99515b1236c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8df47f1e-c13a-452f-b0e2-28c141dbb191.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7573
x-amzn-requestid: d56e7b27-f2cb-4cd3-9f67-ba18d1bfe270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bDkhGHmjoAMFxxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364813a-3a1c18b13c41f38673890b00;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 03:04:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: c-u9tBFoIve3sEwtbUvIFZoPu6eudy3ZFQi8j2m9mTPNEarihTvddw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 05:31:41 GMT
age: 84178
etag: "11d1f2ce72d2aa6686c79f777cd0bdb4ddeb681b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39ac4f41f6bbdba85b2afeb7b011db5f
8e7a2be19b5c7682e86aec81907f6026d14d7313
fbd813af4eb335e1aefa6fb78b672bf89f8606ef688c98d3bd38ffdb77abfba3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8160
x-amzn-requestid: 31cf0571-0ef2-4c99-a6be-afd806b7f449
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJaroFHhoAMF26g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-269b7bcc1bcb8bdc4aa51dc9;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:43 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: J2pyEM7n1b_j4vS7S_K8aiJ-Jj01PtPk7Qb7rEOblKaz-isZtSqo1g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:33 GMT
age: 25806
etag: "8e7a2be19b5c7682e86aec81907f6026d14d7313"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/my16.jpg
200 OK 1.0 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/my16.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 09e160b7e8738af97bdb5eeffad18d72
ced1302eb83edd6cd4fa5485198060d8a8a9abe6
934c8f2afaa9559ea4ec3da4e070be3bf8e894f6deb8e20413bd8ccd21b8fd03
GET /myaff2icu/my16.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/jpeg
content-length: 1042
last-modified: Mon, 25 Apr 2022 03:27:13 GMT
etag: "412-5dd7226f80258"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/clip_footer_3.png
200 OK 2.4 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/clip_footer_3.png
IP
File type PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data
Hash 0650d2120ba512d13badb739eb3bcb2f
ca501dbce36ab62896b57c043b7690bfc1b7f0c3
292ce5b88f14029a90f59f9ac004b7aeeb353b43637870ff4b19ddd0228ab4c4
GET /myaff2icu/clip_footer_3.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 2445
last-modified: Mon, 25 Apr 2022 03:27:10 GMT
etag: "98d-5dd7226cd874a"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/my17.jpg
200 OK 1.1 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/my17.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash f8d880b363c37e2c67f0ef180818a4e7
0eba8f1c533a4446dd2bb3736ef8e880ddfb7843
b2211d80393499fd96a561cbc3695f1a1d7fb40ce0c7173ff6e7ea935ce86795
GET /myaff2icu/my17.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/jpeg
content-length: 1101
last-modified: Mon, 25 Apr 2022 03:27:13 GMT
etag: "44d-5dd7226f90bf9"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/my14.jpg
200 OK 1.6 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/my14.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 7c7142d86dc211731e3c15572ea85536
26b6f5a9011df0a33eebdb46e6ee49600aad2190
fb8f60166e74367aea6c8205674026cb92ec1744ea1c35f3acdefc6baf8439ca
GET /myaff2icu/my14.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/jpeg
content-length: 1559
last-modified: Mon, 25 Apr 2022 03:27:13 GMT
etag: "617-5dd7226f6d978"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/index.php?city=Celina&brand=Desktop&model=Desktop&browser=Chrome&cep=g1ooZx3w3KaMjc6aOC5ZixV7F6d5Cs3M-lCs6cgUnZywGxo8oXGKoq04rHFavd20ZEbO2mTCvzINeUUKJNUcTA-KE2QIUlm5b3Z8WlsCym_5vHYZvNSv3sdPD5MiEOtqwW67bugWeUh5-3NtRqH8PNRvHHmXFrZtspcdAuBglBVuVIgG46N7qMkZJVdJRw61uY2R7aLqjtQiu_AWlZdJFSPXNYm9JpTj31hEZwMqdetHPbnZbqfyc-igdbIdy91ziQSp7hQQPygWO9nJdudq87vOKPpEyTvGeB7yb4KmbrZvRjOItshRRxLORQA03eRUxrIP9FQDPooMFaBBO3Ts_HyiK-YH-SZ6QhzBTQbDWQ-mDylKjro1zHJwvo0aAKCfbT1JW1Bn0a2_lF_ng6az4bTj_1E8VHL_Njo3zAW151Q&lptoken=166a6795718e228859c6
200 OK 8.8 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/index.php?city=Celina&brand=Desktop&model=Desktop&browser=Chrome&cep=g1ooZx3w3KaMjc6aOC5ZixV7F6d5Cs3M-lCs6cgUnZywGxo8oXGKoq04rHFavd20ZEbO2mTCvzINeUUKJNUcTA-KE2QIUlm5b3Z8WlsCym_5vHYZvNSv3sdPD5MiEOtqwW67bugWeUh5-3NtRqH8PNRvHHmXFrZtspcdAuBglBVuVIgG46N7qMkZJVdJRw61uY2R7aLqjtQiu_AWlZdJFSPXNYm9JpTj31hEZwMqdetHPbnZbqfyc-igdbIdy91ziQSp7hQQPygWO9nJdudq87vOKPpEyTvGeB7yb4KmbrZvRjOItshRRxLORQA03eRUxrIP9FQDPooMFaBBO3Ts_HyiK-YH-SZ6QhzBTQbDWQ-mDylKjro1zHJwvo0aAKCfbT1JW1Bn0a2_lF_ng6az4bTj_1E8VHL_Njo3zAW151Q&lptoken=166a6795718e228859c6
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2380)
Hash dada324718189ce9bb50c7698d064b43
50f2b88accc1f788a7167d15c8b388ef2e24614a
bcef6a70936e21a6632620ef7831c467847613ab22e3c3581a2543d1aec89b73
GET /myaff2icu/index.php?city=Celina&brand=Desktop&model=Desktop&browser=Chrome&cep=g1ooZx3w3KaMjc6aOC5ZixV7F6d5Cs3M-lCs6cgUnZywGxo8oXGKoq04rHFavd20ZEbO2mTCvzINeUUKJNUcTA-KE2QIUlm5b3Z8WlsCym_5vHYZvNSv3sdPD5MiEOtqwW67bugWeUh5-3NtRqH8PNRvHHmXFrZtspcdAuBglBVuVIgG46N7qMkZJVdJRw61uY2R7aLqjtQiu_AWlZdJFSPXNYm9JpTj31hEZwMqdetHPbnZbqfyc-igdbIdy91ziQSp7hQQPygWO9nJdudq87vOKPpEyTvGeB7yb4KmbrZvRjOItshRRxLORQA03eRUxrIP9FQDPooMFaBBO3Ts_HyiK-YH-SZ6QhzBTQbDWQ-mDylKjro1zHJwvo0aAKCfbT1JW1Bn0a2_lF_ng6az4bTj_1E8VHL_Njo3zAW151Q&lptoken=166a6795718e228859c6 HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/clean.css
200 OK 2.9 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/clean.css
IP
File type ASCII text, with very long lines (11143), with no line terminators
Hash de3de5fb4d6d44279b9c962d34ed5685
59b3cfca7286f8f5358f3020bbbeec37d14716b1
7551765e87efa81ebec8af8a110878c4a020d605df93e0aa9f88a82de4f05595
GET /myaff2icu/clean.css HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 25 Apr 2022 03:27:10 GMT
etag: W/"2b87-5dd7226cd77aa"
content-encoding: br
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/notify_2x.png
200 OK 279 B URL HTTP/2 44.winprizes544.digital/myaff2icu/notify_2x.png
IP
File type PNG image data, 36 x 32, 8-bit colormap, non-interlaced\012- data
Hash 141ded45bb5d658d1582b253dda5dc01
1d6925385863dd534465c818495e168f0d4633b6
6d5c9dd1ad7b2543ca508f505aefb1bc6b055d39bd8894b6e481f090d0113a0d
GET /myaff2icu/notify_2x.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://44.winprizes544.digital/myaff2icu/clean.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 279
last-modified: Mon, 25 Apr 2022 03:27:17 GMT
etag: "117-5dd722739418f"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/spin_prize2.png
200 OK 2.9 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/spin_prize2.png
IP
File type PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data
Hash dc05391b4ed8b59f3cf2400ff3996f45
3996c073d670e035b391b778407287db9cda3c87
31a273951472fd3d9882b4e0464b1815078065127ef8eed782493a97cadd56a0
GET /myaff2icu/spin_prize2.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://44.winprizes544.digital/myaff2icu/clean.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 2902
last-modified: Mon, 25 Apr 2022 03:27:19 GMT
etag: "b56-5dd722756dbb9"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/action_icons_20px_2x.png
200 OK 1.7 kB URL HTTP/2 44.winprizes544.digital/myaff2icu/action_icons_20px_2x.png
IP
File type PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Hash 887a1513d01bb098928ae132c0dfc902
fba2c4a40dfe89ea83e088ae0577949af6765927
ffa135c7ccdaf4dbd34ca273a467c2549f9c9e3a809eb3c87af93509fb84527e
GET /myaff2icu/action_icons_20px_2x.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://44.winprizes544.digital/myaff2icu/clean.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 1688
last-modified: Mon, 25 Apr 2022 03:27:10 GMT
etag: "698-5dd7226c8c488"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/comment_action_2x.png
200 OK 637 B URL HTTP/2 44.winprizes544.digital/myaff2icu/comment_action_2x.png
IP
File type PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data
Hash 4012bda46485e716c4341cef9c214c17
0a021ad69b618cc6baf618a305ba37f2b40a4da7
8f7e6c0300920a8d8847859adc639417386f837bc0a458436768d4207dc259cc
GET /myaff2icu/comment_action_2x.png HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://44.winprizes544.digital/myaff2icu/clean.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: image/png
content-length: 637
last-modified: Mon, 25 Apr 2022 03:27:10 GMT
etag: "27d-5dd7226cfaa2a"
accept-ranges: bytes
X-Firefox-Spdy: h2
44.winprizes544.digital/favicon.ico
404 Not Found 0 B URL HTTP/2 44.winprizes544.digital/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 04:54:39 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
44.winprizes544.digital/myaff2icu/my15.jpg
404 Not Found 0 B URL HTTP/2 44.winprizes544.digital/myaff2icu/my15.jpg
IP
GET /myaff2icu/my15.jpg HTTP/1.1
Host: 44.winprizes544.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 06 Nov 2022 04:54:38 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
45.76.148.82
34.117.237.239
23.36.76.226
93.184.220.29