www.naughtylotto.net/win_gold_min?tid=5xprbz89796stoeak834swk0s,16501424,5,1043&ctrack=1674763921.2327455954&p=1043&pi=mbep&click_id=wfl766njqppbcc6migtq2k4o&prize=cash-500-usd
94.237.84.54200 OK 3.8 kB URL HTTP/1.1 www.naughtylotto.net/win_gold_min?tid=5xprbz89796stoeak834swk0s,16501424,5,1043&ctrack=1674763921.2327455954&p=1043&pi=mbep&click_id=wfl766njqppbcc6migtq2k4o&prize=cash-500-usd
IP 94.237.84.54:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5882)
Hash 999caad2d416a66aa9868848de6b890a
8478ba4c8509f1e5d1ff6df860cd1db835da4f71
1ff3d1e27bf9e5962c84619818d9a9419f09855836754d26aa813259db37d81c
GET /win_gold_min?tid=5xprbz89796stoeak834swk0s,16501424,5,1043&ctrack=1674763921.2327455954&p=1043&pi=mbep&click_id=wfl766njqppbcc6migtq2k4o&prize=cash-500-usd HTTP/1.1
Host: www.naughtylotto.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Vary: Accept-Encoding
Cache-Control: no-cache, private
Date: Thu, 26 Jan 2023 20:12:23 GMT
Log-Id: 16bd8b52-679e-473b-b0e8-254df95f4aaf
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImhXMEZRMXFPR1IvYVpCT0tsZGx2N1E9PSIsInZhbHVlIjoiaXZCUUhvMFpYak1JbGVtdTVVOGlKMkhaOWRMd05YM090VUdLc2gyRW1tSlFjb0ZqTE1JME83d3BNcGlHMWNpMjcyUlVteVZCdTIwSys4M1VFcmVLa25MMWE4TXZpR0F3UmtjMTRNQkZ5VXJMa25kR0JROGNiZEE2S2t4SEVtc3ciLCJtYWMiOiJjMmQ4NmQ5YmNhNDAwNDBjYWZiOTBiMTliNzE0Y2ZjMjVkOWM4ZDgzZTQ2OTUwYzFjYTM1MTc5MmQwMDlkZGZkIiwidGFnIjoiIn0%3D; expires=Thu, 26-Jan-2023 22:12:23 GMT; Max-Age=7200; path=/
ivr_offers_session=eyJpdiI6Inl5WndMNHhnZ1R0cGRBRktRbXBvOWc9PSIsInZhbHVlIjoiOVJSdmVyYWtjQVR2UXJ5NkZJeDZHOXE2K21pSmdSQmM1Qk1IZXNnZXUzRXpJaFVIR0NmbVg1bmRidW50U255bk9SbXhrcDQ1VHV4YWdxR0FVNnpUa3VjTVphd2M0LzVrYmkzS2hPOGpKY01DbHo5UFIyT3QrMm11eGFtdWNFTGkiLCJtYWMiOiI2N2U3OTk1MGQzZDIxODU2ZjcxMTEzOGYwYThlODllZTRiNGU5OTlkZDNmNTBjMzZiNmJhNWQwYTIxYWIxZGUyIiwidGFnIjoiIn0%3D; expires=Thu, 26-Jan-2023 22:12:23 GMT; Max-Age=7200; path=/; httponly
SESS_TRAF=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; path=/; httponly
visit=eyJpdiI6ImZJWmVqSGhiTlhJSjYxNEROSHNPcXc9PSIsInZhbHVlIjoiczNka2xRaGEvdGxBU2NIa0NxZ0w4L0xtekZ0QXpmODRqNXVxZTg5QnR4WllSdG5CVmQzNmdTOHZMZnZQaTVXNiIsIm1hYyI6ImZhMjQzZGQ1YjQzZTMwYWNjZmRhZTFjODQ0YTI4MDIxMmE3M2JmOWM1MjcwMjMwMTY1NzZiYzA1ODhjZGVlZGUiLCJ0YWciOiIifQ%3D%3D; expires=Fri, 27-Jan-2023 20:12:23 GMT; Max-Age=86400; path=/; httponly
yXIFZGFl8LwHlMvD2Y4R4jJCYl834d3eJUDXfKcA=eyJpdiI6IkQxeEpjZi9jK1R0cWljMWtjTEQwb2c9PSIsInZhbHVlIjoieWNveDlUVVBpcGs2cU5abk05QTZMNnRNOHdmbVVqK3RGclNPdm9JckU5bHNkbE5waHR4UGJVQ1d2UUZmaUdPZ1hUcEdLbUxrK1pMVERrMlRhelgzMU5yREdJdDl6akppamRGOGRUZHZRcE1zbFg4dGwva0lYakwwTk12c0xlNkV5eHJUSWxaZ1ZHWm9HeGJzY005VXE2RTRPRzJCakFZSm5zbHJHbHlESEZ2cnZYZGd3bURnODNoM0JMZXFUTmMxVkJoODJsK3I0Tjk4ZjE4Q3Y5WFpHQlRVNjR2U3FnaGtXQjYxNTRlWEtYMVNERityK24wVkdyYXNqVThvNHRneEY0ZmVvODhZbE1XRVJoT0MvY2dtRVFSWGJsTTI5YWZDWW9kd3NIUDQ5SThvZnNqWGZKYXAwNVVGck9SZXRXSndiSWlrQ1JOOTk4Ritya3Q0VFFFdVFEbUpidTRRZFlESXpMd3Q4aWFUeEF0ZC92c01DWW90MmNGT3JQYlBsNTlYSjhIWThKWWNYY1lUazRRclpFczZkWk9vNEFwZEFxOU1BYkNXcytxNTNYdm9Ic2hxVExZOEhTeDNFRFBPK0tnTFR2RFRQMGhTZmNvVVJCNW5GV2N0M1lOcjFrUFBjTUI3aFY3Sk1wWkg0TzVtNnNYQ0JCaGZvMFZhZWs4VENPdUJsVVQwS3RoYVJmU1ZtdmNUcEh5MXVUdm91c2dPaldGakxoN2FEWGFuZmQ4dGp4cVZsa0tkM1luY0FOTHIwU1J2Q0thMWVCREpXRnJFa05hUGNpbmhkUT09IiwibWFjIjoiYWRlYzhmZjg2NGExNWVjNGFmMDFkN2JlMmEwNTcxYzk2ZTU3YTA0NTU1YTdlZDQxZjIwZjc5M2QzMmU4OTVhMyIsInRhZyI6IiJ9; expires=Thu, 26-Jan-2023 22:12:23 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2285
Expires: Thu, 26 Jan 2023 20:50:28 GMT
Date: Thu, 26 Jan 2023 20:12:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7234
Expires: Thu, 26 Jan 2023 22:12:57 GMT
Date: Thu, 26 Jan 2023 20:12:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 19:42:56 GMT
content-type: application/json
age: 1767
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2379
Expires: Thu, 26 Jan 2023 20:52:02 GMT
Date: Thu, 26 Jan 2023 20:12:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IpJ+Js+hBarNK5xOF54+esI5xpYsiSkK7mh65mFYdAeiUocM3IH1s3rWm78c68gTrMU6FUJmmy9f8Bov6gEQ0Q==
x-amz-request-id: 5KRE8548Z36Q1NBJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 19:20:14 GMT
age: 3129
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 20:12:23 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.naughtylotto.net/css/offers/win_gold_min/app.css?id=b42914e86a05f14d49590f76856d77f3
94.237.84.54200 OK 1.0 kB URL HTTP/1.1 www.naughtylotto.net/css/offers/win_gold_min/app.css?id=b42914e86a05f14d49590f76856d77f3
IP 94.237.84.54:0
File type ASCII text, with very long lines (2967)
Hash 1afbacdf62ccbc91b0b13ff53e2b805b
8a56e95e2c1ccb375e17b861c533d68655e3ea44
c692e7a804aba79cadd4fc88c0fd5c48b4843d01e8d3ca19c3da4d77662935cd
Analyzer Verdict Alert fortinet Phishing
GET /css/offers/win_gold_min/app.css?id=b42914e86a05f14d49590f76856d77f3 HTTP/1.1
Host: www.naughtylotto.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.naughtylotto.net/win_gold_min?tid=5xprbz89796stoeak834swk0s,16501424,5,1043&ctrack=1674763921.2327455954&p=1043&pi=mbep&click_id=wfl766njqppbcc6migtq2k4o&prize=cash-500-usd
Cookie: XSRF-TOKEN=eyJpdiI6ImhXMEZRMXFPR1IvYVpCT0tsZGx2N1E9PSIsInZhbHVlIjoiaXZCUUhvMFpYak1JbGVtdTVVOGlKMkhaOWRMd05YM090VUdLc2gyRW1tSlFjb0ZqTE1JME83d3BNcGlHMWNpMjcyUlVteVZCdTIwSys4M1VFcmVLa25MMWE4TXZpR0F3UmtjMTRNQkZ5VXJMa25kR0JROGNiZEE2S2t4SEVtc3ciLCJtYWMiOiJjMmQ4NmQ5YmNhNDAwNDBjYWZiOTBiMTliNzE0Y2ZjMjVkOWM4ZDgzZTQ2OTUwYzFjYTM1MTc5MmQwMDlkZGZkIiwidGFnIjoiIn0%3D; ivr_offers_session=eyJpdiI6Inl5WndMNHhnZ1R0cGRBRktRbXBvOWc9PSIsInZhbHVlIjoiOVJSdmVyYWtjQVR2UXJ5NkZJeDZHOXE2K21pSmdSQmM1Qk1IZXNnZXUzRXpJaFVIR0NmbVg1bmRidW50U255bk9SbXhrcDQ1VHV4YWdxR0FVNnpUa3VjTVphd2M0LzVrYmkzS2hPOGpKY01DbHo5UFIyT3QrMm11eGFtdWNFTGkiLCJtYWMiOiI2N2U3OTk1MGQzZDIxODU2ZjcxMTEzOGYwYThlODllZTRiNGU5OTlkZDNmNTBjMzZiNmJhNWQwYTIxYWIxZGUyIiwidGFnIjoiIn0%3D; SESS_TRAF=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; visit=eyJpdiI6ImZJWmVqSGhiTlhJSjYxNEROSHNPcXc9PSIsInZhbHVlIjoiczNka2xRaGEvdGxBU2NIa0NxZ0w4L0xtekZ0QXpmODRqNXVxZTg5QnR4WllSdG5CVmQzNmdTOHZMZnZQaTVXNiIsIm1hYyI6ImZhMjQzZGQ1YjQzZTMwYWNjZmRhZTFjODQ0YTI4MDIxMmE3M2JmOWM1MjcwMjMwMTY1NzZiYzA1ODhjZGVlZGUiLCJ0YWciOiIifQ%3D%3D; yXIFZGFl8LwHlMvD2Y4R4jJCYl834d3eJUDXfKcA=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
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 20:12:23 GMT
Content-Type: text/css
Last-Modified: Thu, 26 Jan 2023 10:58:33 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"63d25cd9-bbb"
Expires: Fri, 26 Jan 2024 20:12:23 GMT
Pragma: public
Cache-Control: max-age=31536000, public
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 30ab3600c4010d1c62c0c56c4d5e9987
3c20c1dd9990f0d6429f9228d1bba7cd8222534d
2bdc92291d207e6284bb04a9838c1ac1e5e804f2cdf706c5a2778c1188857893
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2BDC92291D207E6284BB04A9838C1AC1E5E804F2CDF706C5A2778C1188857893"
Last-Modified: Thu, 26 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10583
Expires: Thu, 26 Jan 2023 23:08:46 GMT
Date: Thu, 26 Jan 2023 20:12:23 GMT
Connection: keep-alive
www.naughtylotto.net/js/offers/win_gold_min/app.js?id=67e6000d41ffdaaef0aba07589566f9d
94.237.84.54200 OK 77 kB URL HTTP/1.1 www.naughtylotto.net/js/offers/win_gold_min/app.js?id=67e6000d41ffdaaef0aba07589566f9d
IP 94.237.84.54:0
File type Unicode text, UTF-8 text, with very long lines (65443)
Hash 5bdce72c5e9d5f3e6c4143616d465690
c55b6784236ce2743e86ccade57d9b3f5e7f9704
320daa8544cb01a30dbc71b5bea53bce3aadca127372bcc3079c75567d461ece
GET /js/offers/win_gold_min/app.js?id=67e6000d41ffdaaef0aba07589566f9d HTTP/1.1
Host: www.naughtylotto.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.naughtylotto.net/win_gold_min?tid=5xprbz89796stoeak834swk0s,16501424,5,1043&ctrack=1674763921.2327455954&p=1043&pi=mbep&click_id=wfl766njqppbcc6migtq2k4o&prize=cash-500-usd
Cookie: XSRF-TOKEN=eyJpdiI6ImhXMEZRMXFPR1IvYVpCT0tsZGx2N1E9PSIsInZhbHVlIjoiaXZCUUhvMFpYak1JbGVtdTVVOGlKMkhaOWRMd05YM090VUdLc2gyRW1tSlFjb0ZqTE1JME83d3BNcGlHMWNpMjcyUlVteVZCdTIwSys4M1VFcmVLa25MMWE4TXZpR0F3UmtjMTRNQkZ5VXJMa25kR0JROGNiZEE2S2t4SEVtc3ciLCJtYWMiOiJjMmQ4NmQ5YmNhNDAwNDBjYWZiOTBiMTliNzE0Y2ZjMjVkOWM4ZDgzZTQ2OTUwYzFjYTM1MTc5MmQwMDlkZGZkIiwidGFnIjoiIn0%3D; ivr_offers_session=eyJpdiI6Inl5WndMNHhnZ1R0cGRBRktRbXBvOWc9PSIsInZhbHVlIjoiOVJSdmVyYWtjQVR2UXJ5NkZJeDZHOXE2K21pSmdSQmM1Qk1IZXNnZXUzRXpJaFVIR0NmbVg1bmRidW50U255bk9SbXhrcDQ1VHV4YWdxR0FVNnpUa3VjTVphd2M0LzVrYmkzS2hPOGpKY01DbHo5UFIyT3QrMm11eGFtdWNFTGkiLCJtYWMiOiI2N2U3OTk1MGQzZDIxODU2ZjcxMTEzOGYwYThlODllZTRiNGU5OTlkZDNmNTBjMzZiNmJhNWQwYTIxYWIxZGUyIiwidGFnIjoiIn0%3D; SESS_TRAF=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; visit=eyJpdiI6ImZJWmVqSGhiTlhJSjYxNEROSHNPcXc9PSIsInZhbHVlIjoiczNka2xRaGEvdGxBU2NIa0NxZ0w4L0xtekZ0QXpmODRqNXVxZTg5QnR4WllSdG5CVmQzNmdTOHZMZnZQaTVXNiIsIm1hYyI6ImZhMjQzZGQ1YjQzZTMwYWNjZmRhZTFjODQ0YTI4MDIxMmE3M2JmOWM1MjcwMjMwMTY1NzZiYzA1ODhjZGVlZGUiLCJ0YWciOiIifQ%3D%3D; yXIFZGFl8LwHlMvD2Y4R4jJCYl834d3eJUDXfKcA=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
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 20:12:23 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 26 Jan 2023 10:58:33 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"63d25cd9-39ccc"
Expires: Fri, 26 Jan 2024 20:12:23 GMT
Pragma: public
Cache-Control: max-age=31536000, public
Content-Encoding: gzip
www.naughtylotto.net/js/app.js?id=d837db9160e8db17ac7ed695d8d0bde6
94.237.84.54200 OK 64 kB URL HTTP/1.1 www.naughtylotto.net/js/app.js?id=d837db9160e8db17ac7ed695d8d0bde6
IP 94.237.84.54:0
File type Unicode text, UTF-8 text, with very long lines (65474)
Hash 40f4ac2a307fd204e8474e9159a5eed1
098de131c72307928b6f2f3a4e9ef0ab7cda208d
d704547d50c71714a8c60c714f9eadb0b2e258e28aeb46fa460eb1a6246510bb
Analyzer Verdict Alert fortinet Phishing
GET /js/app.js?id=d837db9160e8db17ac7ed695d8d0bde6 HTTP/1.1
Host: www.naughtylotto.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.naughtylotto.net/win_gold_min?tid=5xprbz89796stoeak834swk0s,16501424,5,1043&ctrack=1674763921.2327455954&p=1043&pi=mbep&click_id=wfl766njqppbcc6migtq2k4o&prize=cash-500-usd
Cookie: XSRF-TOKEN=eyJpdiI6ImhXMEZRMXFPR1IvYVpCT0tsZGx2N1E9PSIsInZhbHVlIjoiaXZCUUhvMFpYak1JbGVtdTVVOGlKMkhaOWRMd05YM090VUdLc2gyRW1tSlFjb0ZqTE1JME83d3BNcGlHMWNpMjcyUlVteVZCdTIwSys4M1VFcmVLa25MMWE4TXZpR0F3UmtjMTRNQkZ5VXJMa25kR0JROGNiZEE2S2t4SEVtc3ciLCJtYWMiOiJjMmQ4NmQ5YmNhNDAwNDBjYWZiOTBiMTliNzE0Y2ZjMjVkOWM4ZDgzZTQ2OTUwYzFjYTM1MTc5MmQwMDlkZGZkIiwidGFnIjoiIn0%3D; ivr_offers_session=eyJpdiI6Inl5WndMNHhnZ1R0cGRBRktRbXBvOWc9PSIsInZhbHVlIjoiOVJSdmVyYWtjQVR2UXJ5NkZJeDZHOXE2K21pSmdSQmM1Qk1IZXNnZXUzRXpJaFVIR0NmbVg1bmRidW50U255bk9SbXhrcDQ1VHV4YWdxR0FVNnpUa3VjTVphd2M0LzVrYmkzS2hPOGpKY01DbHo5UFIyT3QrMm11eGFtdWNFTGkiLCJtYWMiOiI2N2U3OTk1MGQzZDIxODU2ZjcxMTEzOGYwYThlODllZTRiNGU5OTlkZDNmNTBjMzZiNmJhNWQwYTIxYWIxZGUyIiwidGFnIjoiIn0%3D; SESS_TRAF=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; visit=eyJpdiI6ImZJWmVqSGhiTlhJSjYxNEROSHNPcXc9PSIsInZhbHVlIjoiczNka2xRaGEvdGxBU2NIa0NxZ0w4L0xtekZ0QXpmODRqNXVxZTg5QnR4WllSdG5CVmQzNmdTOHZMZnZQaTVXNiIsIm1hYyI6ImZhMjQzZGQ1YjQzZTMwYWNjZmRhZTFjODQ0YTI4MDIxMmE3M2JmOWM1MjcwMjMwMTY1NzZiYzA1ODhjZGVlZGUiLCJ0YWciOiIifQ%3D%3D; yXIFZGFl8LwHlMvD2Y4R4jJCYl834d3eJUDXfKcA=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
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 20:12:23 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 26 Jan 2023 10:58:33 GMT
Transfer-Encoding: chunked
Vary: Accept-Encoding
ETag: W/"63d25cd9-2e42c"
Expires: Fri, 26 Jan 2024 20:12:23 GMT
Pragma: public
Cache-Control: max-age=31536000, public
Content-Encoding: gzip
www.naughtylotto.net/img/offers/win_gold_min/bg.jpg
94.237.84.54200 OK 32 kB URL HTTP/1.1 www.naughtylotto.net/img/offers/win_gold_min/bg.jpg
IP 94.237.84.54:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 683x1024, components 3\012- data
Hash c69a051597a824a3669ae4a4fec7398b
b3c3bccb0e85734964f40e78acf1ad84757e9d1b
35b6e5cc0b3a23ad26e7e6e444998d4aa95d66add467bd2e110a3ae67c61a3c7
GET /img/offers/win_gold_min/bg.jpg HTTP/1.1
Host: www.naughtylotto.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.naughtylotto.net/css/offers/win_gold_min/app.css?id=b42914e86a05f14d49590f76856d77f3
Cookie: XSRF-TOKEN=eyJpdiI6ImhXMEZRMXFPR1IvYVpCT0tsZGx2N1E9PSIsInZhbHVlIjoiaXZCUUhvMFpYak1JbGVtdTVVOGlKMkhaOWRMd05YM090VUdLc2gyRW1tSlFjb0ZqTE1JME83d3BNcGlHMWNpMjcyUlVteVZCdTIwSys4M1VFcmVLa25MMWE4TXZpR0F3UmtjMTRNQkZ5VXJMa25kR0JROGNiZEE2S2t4SEVtc3ciLCJtYWMiOiJjMmQ4NmQ5YmNhNDAwNDBjYWZiOTBiMTliNzE0Y2ZjMjVkOWM4ZDgzZTQ2OTUwYzFjYTM1MTc5MmQwMDlkZGZkIiwidGFnIjoiIn0%3D; ivr_offers_session=eyJpdiI6Inl5WndMNHhnZ1R0cGRBRktRbXBvOWc9PSIsInZhbHVlIjoiOVJSdmVyYWtjQVR2UXJ5NkZJeDZHOXE2K21pSmdSQmM1Qk1IZXNnZXUzRXpJaFVIR0NmbVg1bmRidW50U255bk9SbXhrcDQ1VHV4YWdxR0FVNnpUa3VjTVphd2M0LzVrYmkzS2hPOGpKY01DbHo5UFIyT3QrMm11eGFtdWNFTGkiLCJtYWMiOiI2N2U3OTk1MGQzZDIxODU2ZjcxMTEzOGYwYThlODllZTRiNGU5OTlkZDNmNTBjMzZiNmJhNWQwYTIxYWIxZGUyIiwidGFnIjoiIn0%3D; SESS_TRAF=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; visit=eyJpdiI6ImZJWmVqSGhiTlhJSjYxNEROSHNPcXc9PSIsInZhbHVlIjoiczNka2xRaGEvdGxBU2NIa0NxZ0w4L0xtekZ0QXpmODRqNXVxZTg5QnR4WllSdG5CVmQzNmdTOHZMZnZQaTVXNiIsIm1hYyI6ImZhMjQzZGQ1YjQzZTMwYWNjZmRhZTFjODQ0YTI4MDIxMmE3M2JmOWM1MjcwMjMwMTY1NzZiYzA1ODhjZGVlZGUiLCJ0YWciOiIifQ%3D%3D; yXIFZGFl8LwHlMvD2Y4R4jJCYl834d3eJUDXfKcA=eyJpdiI6IkQxeEpjZi9jK1R0cWljMWtjTEQwb2c9PSIsInZhbHVlIjoieWNveDlUVVBpcGs2cU5abk05QTZMNnRNOHdmbVVqK3RGclNPdm9JckU5bHNkbE5waHR4UGJVQ1d2UUZmaUdPZ1hUcEdLbUxrK1pMVERrMlRhelgzMU5yREdJdDl6akppamRGOGRUZHZRcE1zbFg4dGwva0lYakwwTk12c0xlNkV5eHJUSWxaZ1ZHWm9HeGJzY005VXE2RTRPRzJCakFZSm5zbHJHbHlESEZ2cnZYZGd3bURnODNoM0JMZXFUTmMxVkJoODJsK3I0Tjk4ZjE4Q3Y5WFpHQlRVNjR2U3FnaGtXQjYxNTRlWEtYMVNERityK24wVkdyYXNqVThvNHRneEY0ZmVvODhZbE1XRVJoT0MvY2dtRVFSWGJsTTI5YWZDWW9kd3NIUDQ5SThvZnNqWGZKYXAwNVVGck9SZXRXSndiSWlrQ1JOOTk4Ritya3Q0VFFFdVFEbUpidTRRZFlESXpMd3Q4aWFUeEF0ZC92c01DWW90MmNGT3JQYlBsNTlYSjhIWThKWWNYY1lUazRRclpFczZkWk9vNEFwZEFxOU1BYkNXcytxNTNYdm9Ic2hxVExZOEhTeDNFRFBPK0tnTFR2RFRQMGhTZmNvVVJCNW5GV2N0M1lOcjFrUFBjTUI3aFY3Sk1wWkg0TzVtNnNYQ0JCaGZvMFZhZWs4VENPdUJsVVQwS3RoYVJmU1ZtdmNUcEh5MXVUdm91c2dPaldGakxoN2FEWGFuZmQ4dGp4cVZsa0tkM1luY0FOTHIwU1J2Q0thMWVCREpXRnJFa05hUGNpbmhkUT09IiwibWFjIjoiYWRlYzhmZjg2NGExNWVjNGFmMDFkN2JlMmEwNTcxYzk2ZTU3YTA0NTU1YTdlZDQxZjIwZjc5M2QzMmU4OTVhMyIsInRhZyI6IiJ9
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 20:12:23 GMT
Content-Type: image/jpeg
Content-Length: 31535
Last-Modified: Thu, 26 Jan 2023 10:58:33 GMT
ETag: "63d25cd9-7b2f"
Expires: Fri, 26 Jan 2024 20:12:23 GMT
Pragma: public
Cache-Control: max-age=31536000, public
Accept-Ranges: bytes
www.naughtylotto.net/img/prizes/cash-500-usd/default/default@0.75x.png
94.237.84.54200 OK 14 kB URL HTTP/2 www.naughtylotto.net/img/prizes/cash-500-usd/default/default@0.75x.png
IP 94.237.84.54:0
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash 8a0e556cacd7eae426890d0b9c82592e
321c72a9a18d8967c967c0067a9ebc9030eb08a1
bab0791c1c042dafa1ab7f295943c515cd66458ef193f5da56734f1804c5e63a
GET /img/prizes/cash-500-usd/default/default@0.75x.png HTTP/1.1
Host: www.naughtylotto.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.naughtylotto.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 20:12:23 GMT
content-type: image/png
content-length: 14072
last-modified: Thu, 26 Jan 2023 10:57:04 GMT
etag: "63d25c80-36f8"
expires: Fri, 26 Jan 2024 20:12:23 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 82b4e5d3533c1412c83acafde6bf0165
cc1d9fb62c29dc9dd3ae5c13a6aa69480c94e9c7
015e8d386040e0dc8cc2477b57ae832faa4035d01044f0eeb08a7f1e58a0bdf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "015E8D386040E0DC8CC2477B57AE832FAA4035D01044F0EEB08A7F1E58A0BDF8"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2706
Expires: Thu, 26 Jan 2023 20:57:29 GMT
Date: Thu, 26 Jan 2023 20:12:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 19:49:01 GMT
age: 1403
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
s3ntry.net/api/18/envelope/?sentry_key=ccd7567c32f347d999f51c043b0ccde6&sentry_version=7
162.55.168.249200 OK 2 B URL HTTP/1.1 s3ntry.net/api/18/envelope/?sentry_key=ccd7567c32f347d999f51c043b0ccde6&sentry_version=7
IP 162.55.168.249:0
ASN #24940 Hetzner Online GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/18/envelope/?sentry_key=ccd7567c32f347d999f51c043b0ccde6&sentry_version=7 HTTP/1.1
Host: s3ntry.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.naughtylotto.net/
Content-Type: text/plain;charset=UTF-8
Origin: http://www.naughtylotto.net
Content-Length: 434
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 26 Jan 2023 20:12:24 GMT
Content-Type: application/json
Content-Length: 2
Connection: close
access-control-allow-origin: http://www.naughtylotto.net
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6075
Expires: Thu, 26 Jan 2023 21:53:39 GMT
Date: Thu, 26 Jan 2023 20:12:24 GMT
Connection: keep-alive
push.services.mozilla.com/
35.164.56.167101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.164.56.167:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7frbhZYGsdUXPaYOdxYNVg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WTGijsXd5dcP18hfbZVbRumjLOM=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14209
Expires: Fri, 27 Jan 2023 00:09:14 GMT
Date: Thu, 26 Jan 2023 20:12:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14209
Expires: Fri, 27 Jan 2023 00:09:14 GMT
Date: Thu, 26 Jan 2023 20:12:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14209
Expires: Fri, 27 Jan 2023 00:09:14 GMT
Date: Thu, 26 Jan 2023 20:12:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17e1b6f3caa98b0e0972802408dd3f93
07e48bf3565e00d093d72dd4ada606f5d39a4838
7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9285
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYT2HzvoAMFYYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:52:28 GMT
age: 80397
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d59b0db3cc1f31f9154d32804a8e3940
498c310e0f4a84c1350bae55aec0d2a0192f8dda
14a2b4e9763a62478015d8f61bf9e44eb67dfe08a58cc94dc836dc8ff3f1b6cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd53f06d1-60cf-4ced-8bcd-877162b44d2d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7014
x-amzn-requestid: 689ad8b2-4ec8-4f61-a31e-7813c9143f9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e-EyFHmEIAMFsHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8b4d9-7ce5fef1456ecc73690eff07;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: t-84fZv6Btjp5l37tn35lW8fY-jNChCVD6qeKV23KtUwnBSphyRkOw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 17:55:36 GMT
age: 8209
etag: "498c310e0f4a84c1350bae55aec0d2a0192f8dda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41fd0074a6ce752b1271302feade4cee
6311d1365504f06cb7516606c56c502d553c9d16
544c508899fe8855b0975a87cb0bf35663ab4ad0ec8fd057b3962d50cc001b8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7365
x-amzn-requestid: c2a8ae3d-47f8-415f-bf08-78dd12ede3d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwEUbIAMFnag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-38f72fec78120cf113c7a4f7;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rB4HXb1BDKiMZ5Xsb_U1UzBInPftuAryrVUhcE7v6C5qprrGRFooFg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:51:26 GMT
age: 80459
etag: "6311d1365504f06cb7516606c56c502d553c9d16"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f62e9b7bdca82d18c945851912d8fea8
a7ca44d337c43bc5c6145b26778661c71cc50484
5da02cc405c1cada55813ffe376844375f1d6ad222cbb63405348b1f5132a0b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a8a63ec-e0a4-4297-b143-649ad3968ae8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9595
x-amzn-requestid: c257bfbe-1bd7-4540-bbfa-e4c49a2624a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXwfGigoAMFvBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a002-226c08656eeefbfa3c2dddb6;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k9njnQmggD7UkVJzZqSzo90HJJjTjGK0QIoPU0HWYKrSstjM6s1rOw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:57:18 GMT
age: 80107
etag: "a7ca44d337c43bc5c6145b26778661c71cc50484"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VATQ0SjZfM_btXwR4M5keLmd-EE6717EHEiXrF2zpHNrli93EhN6Rw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:48:42 GMT
age: 80623
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13cd008fb3e2739ec7caadadbd427655
c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1
a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8822
x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwF2KIAMFjDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: n2ULSpeRMRZ9CDjmrwd56ti_gPYh9ApC521naXURI2Bh1eiKwjyHZw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:51:26 GMT
age: 80459
etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2