Report - www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action

Report Overview

Submitted URL
www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_tmp
IP
52.19.101.114
ASN
#16509 AMAZON-02
Submitted
2023-03-31 20:01:08
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
20

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
www.mydataanalisys.com	unknown	2022-11-03T20:10:11Z	2023-03-31T19:10:06Z	1.6 kB	809 B	52.19.101.114
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-31T18:14:44Z	782 B	2.4 kB	35.241.9.150
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-31T21:56:16Z	341 B	641 B	192.229.221.95
pushbrands.g2afse.com	unknown	2022-06-29T10:59:05Z	2023-03-29T22:00:44Z	588 B	450 B	34.91.218.141
rewardwinners.com	477722	2020-10-02T16:55:30Z	2023-03-29T22:00:45Z	21 kB	5.5 MB	167.172.111.121
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-31T18:12:04Z	3.0 kB	8.0 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-31T18:18:04Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-31T18:12:09Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-31T18:13:52Z	606 B	238 B	34.117.65.55
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-31T07:51:33Z	3.2 kB	60 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-03-31	medium	rewardwinners.com/js/app.ba1998d6.js	Phishing
2023-03-31	medium	rewardwinners.com/js/chunk-vendors.be25b63f.js	Phishing
2023-03-31	medium	rewardwinners.com/assets/fonts/font.fda9ef28.ttf	Phishing
2023-03-31	medium	rewardwinners.com/assets/img/brands/paypal.svg	Phishing
2023-03-31	medium	rewardwinners.com/js/app.ba1998d6.js	Phishing
2023-03-31	medium	rewardwinners.com/assets/img/brands/google-pay.svg	Phishing
2023-03-31	medium	rewardwinners.com/assets/img/brands/exon.svg	Phishing
2023-03-31	medium	rewardwinners.com/assets/img/brands/walmart.svg	Phishing
2023-03-31	medium	rewardwinners.com/assets/img/brands/cashapp.svg	Phishing
2023-03-31	medium	rewardwinners.com/assets/img/brands/zelle.svg	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_tmp	306 B	2023-04-01	2023-04-01
Pretty URL www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_tmp IP 52.19.101.114 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-01 11:07:26 Last Seen2023-04-01 11:07:26 Times Seen1 Hash 1e30a45b20e3764e50d94309def2e7a4 4b735e9ac0d1899960d16253643f727149302ce0 d9f70b693b3d72df75e324d422ee226219a7b09363c3ddd4bbc35303ac1ef6c7 Loading...

	www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_final	161 B	2023-04-01	2023-04-01
Pretty URL www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_final IP 52.19.101.114 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-01 11:07:26 Last Seen2023-04-01 11:07:26 Times Seen1 Hash d1d3807f8128d194300cea32c2158e3b b19de65ca79f3c161e85d22eec947c87b6ddc6ad e67bba649a701ba5eee97e6e246ccdc9236106b89c83fcffa2896f844a8a8626 Loading...

	rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b	51 B	2023-03-08	2023-05-15
Pretty URL rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b IP 167.172.111.121 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:23 Last Seen2023-05-15 14:21:45 Times Seen76 Hash 0ddb67e24570b4d8238311d9fd67f8e6 29cf07bfc2ab66b89c1cf72cb5121cacf481f3b2 78fa1da705224370c3e56985f74db1c11724a107a89e7f7c0d64de8063e1ebad Loading...

	rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b	13 kB	2023-03-08	2023-05-15
Pretty URL rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b IP 167.172.111.121 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:23 Last Seen2023-05-15 14:21:45 Times Seen76 Hash 310c2d6c8d605407d6e9e19f583f19d1 054f176324e6e68aa33f83e727b99924634305c1 6003e7c8f6c20568bf5cf94d8481001b54820873ad5c22d69239d5504bce89fe Loading...

	rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b	1.8 kB	2023-03-08	2023-05-15
Pretty URL rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b IP 167.172.111.121 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:23 Last Seen2023-05-15 14:21:45 Times Seen76 Hash 934dfc6904c66cfbc5d83e6e001a1498 a2588f0eabc85736ede19806be246b90220d3b87 50a9356dce9f27fa5f71548819d329eb0bf0bd26ed99971fb7834268ae332430 Loading...

		Size	First Seen	Last Seen
	#1 Write - 5531a5834816222280f20d1ef9e95f69	4 B	2023-03-12	2024-01-28
Pretty Observations First Seen2023-03-12 12:17:15 Last Seen2024-01-28 13:22:54 Times Seen21116 Hash 5531a5834816222280f20d1ef9e95f69 445cd2fd3273962bdf09425109a2d09f7170e837 d398b29d3dbbb9bf201d4c7e1c19ff9d43c15fd45a0cec46fbe9885ec3f6e97f Loading...

HTTP Transactions (71)

URL IP Response Size

www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_tmp

52.19.101.114

200 OK

323 B

URL HTTP/1.1
www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_tmp
IP
52.19.101.114:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (323), with no line terminators
Size
323 B (323 bytes)
Hash
519069a82cfe716019ec22236fa31b98
c756ec823855ea7888c41e39147392ccd14ca35b
51bf066299b2754b3248198c005dc9bd6f4b35db607f0c334d69dc3bad1113d8

HTTP Headers

GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_tmp HTTP/1.1
Host: www.mydataanalisys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 20:00:56 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 323
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
cca063332ba9a89eadd62a8dd7f81a9b
d473b2a7a32c964599ff3bac8f98fa578f03d1d1
02fb74c7c695ad99f7f2fd7c02ae2b88e2da1c5db339f883333d9090291931dc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02FB74C7C695AD99F7F2FD7C02AE2B88E2DA1C5DB339F883333D9090291931DC"
Last-Modified: Wed, 29 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5948
Expires: Fri, 31 Mar 2023 21:40:04 GMT
Date: Fri, 31 Mar 2023 20:00:56 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7af19a5145a4ee99bdf18831bad04bfd
7bdd2a4785b999ef54a2644211d2b2b7190fb8e1
3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0"
Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11040
Expires: Fri, 31 Mar 2023 23:04:56 GMT
Date: Fri, 31 Mar 2023 20:00:56 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
374c9e295a804e605c402f48ae7e2446
967394b36ecdff2dd32842f878887f061024c6b3
7652dfcb9e2d620ce1d033be8ecc53166d2881154c15decd60899415e5ac2706

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7652DFCB9E2D620CE1D033BE8ECC53166D2881154C15DECD60899415E5AC2706"
Last-Modified: Thu, 30 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4722
Expires: Fri, 31 Mar 2023 21:19:38 GMT
Date: Fri, 31 Mar 2023 20:00:56 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 31 Mar 2023 19:28:25 GMT
content-type: application/json
age: 1951
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: AZ9JNLDk2G4zVZLeDkzJe9p0pWnwYMvi6aEpfKkfrUCb4NIc9Zb6mTMRT/Xd/HM1x+vYU4JHUBQ=
x-amz-request-id: 3ARJXQD469BWM993
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 31 Mar 2023 19:12:18 GMT
age: 2918
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 31 Mar 2023 20:00:56 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

52.19.101.114

200 OK

178 B

URL HTTP/1.1
www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_final
IP
52.19.101.114:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with no line terminators
Size
178 B (178 bytes)
Hash
6c51a9ca7520ba714cd9debcac9a8e1f
141f23ed2540d16fb97d17ca803b207f406609a6
8ccb40420753665df02f4c6a55f74e448d1294491acf0b67347befa2edf37122

HTTP Headers

GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_final HTTP/1.1
Host: www.mydataanalisys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mydataanalisys.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cubXlkYXRhYW5hbGlzeXMuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/b2ZmZXJfaWQ9MjkmcGlkPTkmczE9JTdCczElN0QmczM9JTdCYnV0dG9uJTdEJnM0PSU3QmNhbXBfaWQlN0Qmc3ViMT0lN0JzdWIxJTdEJnRpZD12YndsazY0MjczYmVhMDAwYzNhODk=&action=action_tmp
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 31 Mar 2023 20:00:56 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 178
Connection: keep-alive

ocsp.digicert.com/

192.229.221.95

200 OK

313 B

URL HTTP/1.1
ocsp.digicert.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
313 B (313 bytes)
Hash
5e1fcb913bac6111b79d24cd0510dcc3
44e5568cf1d71768309b5a683a1d3afd10f07442
8a70754011f15592bfbaec0e6a7d8a5d488ce49662e45fa3afaa601f68346d66

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4737
Cache-Control: max-age=101249
Content-Type: application/ocsp-response
Date: Fri, 31 Mar 2023 20:00:57 GMT
Etag: "642611f9-139"
Expires: Sun, 02 Apr 2023 00:08:26 GMT
Last-Modified: Thu, 30 Mar 2023 22:49:29 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 313

pushbrands.g2afse.com/click?offer_id=29&pid=9&s1=%7Bs1%7D&s3=%7Bbutton%7D&s4=%7Bcamp_id%7D&sub1=%7Bsub1%7D&tid=vbwlk64273bea000c3a89

34.91.218.141

302 Found

0 B

URL HTTP/2
pushbrands.g2afse.com/click?offer_id=29&pid=9&s1=%7Bs1%7D&s3=%7Bbutton%7D&s4=%7Bcamp_id%7D&sub1=%7Bsub1%7D&tid=vbwlk64273bea000c3a89
IP
34.91.218.141:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /click?offer_id=29&pid=9&s1=%7Bs1%7D&s3=%7Bbutton%7D&s4=%7Bcamp_id%7D&sub1=%7Bsub1%7D&tid=vbwlk64273bea000c3a89 HTTP/1.1
Host: pushbrands.g2afse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mydataanalisys.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
server: nginx
date: Fri, 31 Mar 2023 20:00:57 GMT
content-length: 0
location: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=64273bf9be63b90001c0303b; expires=Sat, 30 Mar 2024 20:00:57 GMT; secure; SameSite=None
afoffers={"29":1680292857}; expires=Sat, 30 Mar 2024 20:00:57 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ab61862f016dea85f8aa55e59369d905
a5e81f13052b9e9184caf05a9740c345a40d1f22
e0d580c313088d524a5338e63e4acf9f3f3cb45a54f2528c5d1c4915d71b255b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0D580C313088D524A5338E63E4ACF9F3F3CB45A54F2528C5D1C4915D71B255B"
Last-Modified: Thu, 30 Mar 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10821
Expires: Fri, 31 Mar 2023 23:01:18 GMT
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
87f3f3b3d19cdb73935ae18491e745fa
9387e7b5ad8277b81822cacae4c80464a60bfca0
e0e5866c813322455597474c730e3582eea12876a0e4f5833410bf208326639e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0E5866C813322455597474C730E3582EEA12876A0E4F5833410BF208326639E"
Last-Modified: Wed, 29 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 01 Apr 2023 02:00:57 GMT
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Pragma, Backoff, Expires, Last-Modified, Content-Type, Alert, Retry-After, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 31 Mar 2023 19:17:26 GMT
age: 2611
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b

167.172.111.121

200 OK

24 kB

URL HTTP/1.1
rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
24 kB (24364 bytes)
Hash
6fa7359a6a7cf13382ed1c3521b4546d
0ef3a77e261d2fa592f362a24f43ce6faf5aba34
4f745b4419e555c5f7c50dd19d393248456e9e7de469362a426cf7c629fc01ac

HTTP Headers

GET /?s1=9_&s2=64273bf9be63b90001c0303b HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.mydataanalisys.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=utf-8
Content-Length: 24364
ETag: W/"5f2c-DvOnfiYdL6WS82KiT0POb69aujQ"
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/css/app.88835c8e.css

167.172.111.121

200 OK

14 kB

URL HTTP/1.1
rewardwinners.com/assets/css/app.88835c8e.css
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
ASCII text
Size
14 kB (13498 bytes)
Hash
5c5529930309a4697770f210044ef38a
9e7c71b9150b11d7bcc8ca3e8d49e00fd97031ae
3f832b6bd74314b44cc7f22eecf1bb0c19b9936cfbe63f5b01bb1515336d6e4c

HTTP Headers

GET /assets/css/app.88835c8e.css HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 31 Jul 2022 14:24:19 GMT
ETag: W/"34ba-18254a4bf4e"
Content-Type: text/css; charset=UTF-8
Content-Length: 13498
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

push.services.mozilla.com/

34.117.65.55

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.117.65.55:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: L5WKHPmDALo1g/mU/q7muA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8+fShPjQJ3YMZQF6qYituzis53A=
Date: Fri, 31 Mar 2023 20:00:57 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

rewardwinners.com/assets/img/bg-rewardwinners.jpg

167.172.111.121

200 OK

65 kB

URL HTTP/1.1
rewardwinners.com/assets/img/bg-rewardwinners.jpg
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size
65 kB (64865 bytes)
Hash
6c46063d2cd8aa82cee6ff6a1ab44221
defcc990bf283c8812a1886644cb0323e7c322f2
508a4d715504c6b7e0fa672d4bd13756d46dcc457bd4c14ad800c5302bb04a0a

HTTP Headers

GET /assets/img/bg-rewardwinners.jpg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Mon, 13 Jun 2022 12:25:02 GMT
ETag: W/"fd61-1815d064c98"
Content-Type: image/jpeg
Content-Length: 64865
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/js/app.ba1998d6.js

167.172.111.121

404 Not Found

157 B

URL HTTP/1.1
rewardwinners.com/js/app.ba1998d6.js
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
157 B (157 bytes)
Hash
b0f8e6746eaab670bc200d88f2b074e1
5106ee70f95489e5b82e6dcbe44b15565ee3ed22
85ff68edc7b376f105557a2635ea26b966095c578ad514a2ccc0897b55fc5ca5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/app.ba1998d6.js HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 157
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/js/chunk-vendors.be25b63f.js

167.172.111.121

404 Not Found

167 B

URL HTTP/1.1
rewardwinners.com/js/chunk-vendors.be25b63f.js
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
167 B (167 bytes)
Hash
3936d71f644fc8472b8a2a0956517f2a
24b085677a172e9f701b1c9bcab9143407738346
fae303bfedb7029eb9a13810e1355c871bbc3a875543a8ca43114097e24c476a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/chunk-vendors.be25b63f.js HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 167
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/boxes_paypal.png

167.172.111.121

404 Not Found

175 B

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/boxes_paypal.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
175 B (175 bytes)
Hash
529c2531d32aefe8d90c9ef5dd7d1405
ccbc0dab025d4d281467d9a0bd6e0b86f95cae74
35909ac5cefd9631a47e7af343fbafc6fd7295285d3aade39ef388a86c92961d

HTTP Headers

GET /assets/img/showcase/boxes_paypal.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 175
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/fonts/font.fda9ef28.ttf

167.172.111.121

404 Not Found

169 B

URL HTTP/1.1
rewardwinners.com/assets/fonts/font.fda9ef28.ttf
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
169 B (169 bytes)
Hash
d9a7aaa2284b8807e198a150c7ca7369
522acdd0c0b24e33898b007d1f41bbac193e5022
61df527d8d6fdc2fa8cb679da775b46b59521d73be952a07547d7a4b3d25fecf

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /assets/fonts/font.fda9ef28.ttf HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/assets/css/app.88835c8e.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 169
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/paypal.svg

167.172.111.121

200 OK

28 kB

URL HTTP/1.1
rewardwinners.com/assets/img/brands/paypal.svg
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (28520), with no line terminators
Size
28 kB (28520 bytes)
Hash
92513e972892e2e05626ba86f842d238
4c54b375c5b0ad3a7a000b76d939f1503001bb65
d879ca7b08d8808c4299f37a4bbc74bdc33903509d7bac9530c653a429a1ba0e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /assets/img/brands/paypal.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"6f68-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 28520
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/js/app.ba1998d6.js

167.172.111.121

404 Not Found

157 B

URL HTTP/1.1
rewardwinners.com/js/app.ba1998d6.js
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
157 B (157 bytes)
Hash
b0f8e6746eaab670bc200d88f2b074e1
5106ee70f95489e5b82e6dcbe44b15565ee3ed22
85ff68edc7b376f105557a2635ea26b966095c578ad514a2ccc0897b55fc5ca5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /js/app.ba1998d6.js HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 157
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/boxes_paypal.png

167.172.111.121

404 Not Found

175 B

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/boxes_paypal.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
175 B (175 bytes)
Hash
529c2531d32aefe8d90c9ef5dd7d1405
ccbc0dab025d4d281467d9a0bd6e0b86f95cae74
35909ac5cefd9631a47e7af343fbafc6fd7295285d3aade39ef388a86c92961d

HTTP Headers

GET /assets/img/showcase/boxes_paypal.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=utf-8
Content-Length: 175
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/google-pay.svg

167.172.111.121

200 OK

2.0 kB

URL HTTP/1.1
rewardwinners.com/assets/img/brands/google-pay.svg
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2017), with no line terminators
Size
2.0 kB (2017 bytes)
Hash
06d5004e90de6dcbb31c0766edd8b4f7
94e12d0b7e7eb30155f9fba0423ef4fe409d1f29
149868ad0f7e6fb94d2bc647fef93f61265ac88b3c7e7450d68c4324a6902508

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /assets/img/brands/google-pay.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"7e1-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 2017
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/exon.svg

167.172.111.121

200 OK

1.2 kB

URL HTTP/1.1
rewardwinners.com/assets/img/brands/exon.svg
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1151)
Size
1.2 kB (1152 bytes)
Hash
d0627b5aeec28a22ecb1a7085fc2894f
8e2778275f04f2de488c5e84bcd3904816ee52df
9ed1c51adf70b8626bec5d4739e870b95967c67169a9c8ed25a7e50554c18de9

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /assets/img/brands/exon.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"480-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 1152
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/boxes.png

167.172.111.121

200 OK

89 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/boxes.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1590, 8-bit colormap, non-interlaced\012- data
Size
89 kB (88908 bytes)
Hash
683db024cb30805e42501500bf10aef0
a340328944f478a520b51e6f07d041a4be1eb394
0a1a708f8ddd835aa9831dd4924e2a3a81e6716d2a70d836c73765addf0f2b1c

HTTP Headers

GET /assets/img/showcase/paypal/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"15b4c-181c32f85c7"
Content-Type: image/png
Content-Length: 88908
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/cups.png

167.172.111.121

200 OK

100 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/cups.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1328, 8-bit colormap, non-interlaced\012- data
Size
100 kB (99940 bytes)
Hash
bfa35a22084a7a8026f3d36e8ace882a
90451d54413bc4de68529f7c7cdf6a6805b0abc5
0a332e82dffd4d7ed10950eb00601c311489d3df95ec242d72e6242c9ad9941a

HTTP Headers

GET /assets/img/showcase/google_pay/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"18664-181c32f85b7"
Content-Type: image/png
Content-Length: 99940
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/cups.png

167.172.111.121

200 OK

93 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/cups.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1342, 8-bit colormap, non-interlaced\012- data
Size
93 kB (93224 bytes)
Hash
94ffd2bb908f5206c88237778c1d4267
54c657b1a6081d62f546c15bb3410b989c543367
1ee7ec1b85b74175ec3c8ac38df2c85587731a53388f07b2bfc867ee487b43fc

HTTP Headers

GET /assets/img/showcase/paypal/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16c28-181c32f85c7"
Content-Type: image/png
Content-Length: 93224
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/cups.png

167.172.111.121

200 OK

108 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/cups.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1462, 8-bit colormap, non-interlaced\012- data
Size
108 kB (108273 bytes)
Hash
a203b399403b97d24f6338069437430b
132a300659a760f95274f8685bfdefc634e1bfdf
eb19bb5c513f7fe576145adade77e13b8ab5220a821ec45b0a5792f95eae2ec7

HTTP Headers

GET /assets/img/showcase/gas/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1a6f1-181c32f85a7"
Content-Type: image/png
Content-Length: 108273
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/spinner.png

167.172.111.121

200 OK

152 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/spinner.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1574, 8-bit colormap, non-interlaced\012- data
Size
152 kB (151452 bytes)
Hash
bd41964392e2647a1efff2d91243d91d
e0c425a291133b6ef58ab260d2bedfaad9eda828
61ee158e3ba6582aaa6dbd410ba1d5f4364b2f1d5c62f09d2c59569508a23ff9

HTTP Headers

GET /assets/img/showcase/walmart/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Wed, 13 Jul 2022 08:44:18 GMT
ETag: W/"24f9c-181f6bafb96"
Content-Type: image/png
Content-Length: 151452
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/spinner.png

167.172.111.121

200 OK

139 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/spinner.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1518, 8-bit colormap, non-interlaced\012- data
Size
139 kB (139284 bytes)
Hash
379217d9772364a802bc09fbf644c41c
8589b281217b2e561d06d98270c3b24505a2c12f
edef162fdf00360271eb09171e510e3427c9bed5bd0c7fa183f70b7818716cf4

HTTP Headers

GET /assets/img/showcase/cashapp/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"22014-181c32f85a3"
Content-Type: image/png
Content-Length: 139284
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/boxes.png

167.172.111.121

200 OK

95 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/boxes.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size
95 kB (95350 bytes)
Hash
10f7fa34801df7a2765a1437eb7ea329
e5201292701c5403c05e642e6fe6564d7638efb2
4bb876b757715ad99a7659cfa1ac37e3417ec67a21568fba92fce24477fea6c5

HTTP Headers

GET /assets/img/showcase/zelle/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"17476-181c32f85e3"
Content-Type: image/png
Content-Length: 95350
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/spinner.png

167.172.111.121

200 OK

170 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/spinner.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1582, 8-bit colormap, non-interlaced\012- data
Size
170 kB (169666 bytes)
Hash
84f40b4163cac49140edf8f47fec1b76
3e6e5f16bbf2f205d90ca7d96bca83063f641f5e
bbaae5bf63ddded780164e7ce4979327b9f8c7f2e63d6739b098571ad8b70a69

HTTP Headers

GET /assets/img/showcase/paypal/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"296c2-181c32f85d3"
Content-Type: image/png
Content-Length: 169666
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/dress.png

167.172.111.121

200 OK

385 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/dress.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2874 x 1574, 8-bit colormap, non-interlaced\012- data
Size
385 kB (385428 bytes)
Hash
a4e590e2901e4bf4075f38dd87f8024e
7ae231ced91451cf52552e094cdb28d0f0ddf323
a56352da8f0c9d099cd9ab400827d549136ae09060336dc7d11e47381999d6bc

HTTP Headers

GET /assets/img/showcase/gas/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"5e194-181c32f85ab"
Content-Type: image/png
Content-Length: 385428
Date: Fri, 31 Mar 2023 20:00:57 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/queen.png

167.172.111.121

200 OK

115 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/queen.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1248, 8-bit colormap, non-interlaced\012- data
Size
115 kB (115320 bytes)
Hash
6fdc1ce56af238756a6de387ddcab6c6
e450ad983b5527f6723c04f80f3b8302b603dc14
661b30bc93a86048744baf895a8eb11246c0a784a0d2bdea27b4931ba8a3148e

HTTP Headers

GET /assets/img/showcase/cashapp/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1c278-181c32f859f"
Content-Type: image/png
Content-Length: 115320
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/spinner.png

167.172.111.121

200 OK

148 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/spinner.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1584, 8-bit colormap, non-interlaced\012- data
Size
148 kB (148404 bytes)
Hash
b640b06650d374f0683e2f540466d5ec
8198afe78ef4ac6a791c66ad812471c51c384005
55c2db7b0c60b50a4d96ac213b80dde0d93cad41649e72183c4e34e995cef7f6

HTTP Headers

GET /assets/img/showcase/zelle/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"243b4-181c32f85f3"
Content-Type: image/png
Content-Length: 148404
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/boxes.png

167.172.111.121

200 OK

80 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/boxes.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1450, 8-bit colormap, non-interlaced\012- data
Size
80 kB (79819 bytes)
Hash
6c7b351fb75ccba45db0ebeabd247a6c
74a6c505db18700326f265e0e2f67b15da9bac74
36bfdfc7e54820b6b4b70bcdc2a8d7c023e65b013c9c6d7b095c4c01c1b84a4c

HTTP Headers

GET /assets/img/showcase/cashapp/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"137cb-181c32f8593"
Content-Type: image/png
Content-Length: 79819
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/dress.png

167.172.111.121

200 OK

415 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/dress.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size
415 kB (415057 bytes)
Hash
3d601e32b8c5be36d3d96a948346e44d
05fbe1e721305a761abc137ee5db467ac1225231
12321619fdc59e8ad0aba4f3be54ac260f906753255b5ae091cacf4a5b00484a

HTTP Headers

GET /assets/img/showcase/zelle/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"65551-181c32f85ef"
Content-Type: image/png
Content-Length: 415057
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/cups.png

167.172.111.121

200 OK

100 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/cups.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1470, 8-bit colormap, non-interlaced\012- data
Size
100 kB (99463 bytes)
Hash
5ae885804f17b3b979d7c497f3caad4a
7b4372666f19c5346ba8572a261019ee3600fb7a
c7b8c10d6dd5b434de2fc377327fbe5ed6b69a74552653ce9c48546e7a668631

HTTP Headers

GET /assets/img/showcase/zelle/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"18487-181c32f85e7"
Content-Type: image/png
Content-Length: 99463
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/spinner.png

167.172.111.121

200 OK

173 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/spinner.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1592, 8-bit colormap, non-interlaced\012- data
Size
173 kB (173129 bytes)
Hash
d50db72acb5bbc248c13bc34895ec8e4
2160c6e91cb6d701b30b7743e905a10856fea0af
7adbd7594b1d1f21427e06c398ed63bdaa99571714a9cf4d34be9a077613360b

HTTP Headers

GET /assets/img/showcase/google_pay/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"2a449-181c32f85c3"
Content-Type: image/png
Content-Length: 173129
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/boxes.png

167.172.111.121

200 OK

94 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/boxes.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size
94 kB (93531 bytes)
Hash
87449bdc8ba33090b9d2299593ec34f3
37fd74b810a9a40b644f5bacc1c74aaf30cfc26d
09f306db9c341f938af10d3a5fbdc91cb8e85341cb7280cc5aab2d3afbff3f3a

HTTP Headers

GET /assets/img/showcase/gas/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16d5b-181c32f85a3"
Content-Type: image/png
Content-Length: 93531
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/dress.png

167.172.111.121

200 OK

421 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/dress.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1584, 8-bit colormap, non-interlaced\012- data
Size
421 kB (421221 bytes)
Hash
9b10d1a2e72b18ea995f746525a2b513
b918d46573b890eb5decf48408a49c42b636d263
2911767bb00169f62ae9ab50b72ffda4daa4d33ceebc16deec740e81940faeb6

HTTP Headers

GET /assets/img/showcase/walmart/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"66d65-181c32f85df"
Content-Type: image/png
Content-Length: 421221
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/queen.png

167.172.111.121

200 OK

124 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/queen.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1412, 8-bit colormap, non-interlaced\012- data
Size
124 kB (124520 bytes)
Hash
f19ae5105b207ed9202171e9b10c461a
78dd8c249dc2fdedf4b84381d78c5829cb959edb
1369dec5a6d5b2f747f697835d4c6a9613699cde083e836c070246e12c10b49b

HTTP Headers

GET /assets/img/showcase/gas/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1e668-181c32f85af"
Content-Type: image/png
Content-Length: 124520
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/boxes.png

167.172.111.121

200 OK

96 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/boxes.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1590, 8-bit colormap, non-interlaced\012- data
Size
96 kB (96525 bytes)
Hash
ccdf8e3da4ab9989e868974a67ba0420
a05f5b8bd2ae3428c769a67d9c937ab030d1e841
5056fa7494330255bb501b5221069e631ed6f220eee4619b61c312a8521c3da8

HTTP Headers

GET /assets/img/showcase/google_pay/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1790d-181c32f85b3"
Content-Type: image/png
Content-Length: 96525
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/cups.png

167.172.111.121

200 OK

89 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/cups.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1338, 8-bit colormap, non-interlaced\012- data
Size
89 kB (88905 bytes)
Hash
ebb7cf2f39bc595a9e635f813dd54ee2
8ab85b438262a8fe9e9a398c4b56428250b11ea1
84a5b9f2bc0da7f364d91c2ccc938a1088850e07e7b85b4ae90b1e4d2295eb4b

HTTP Headers

GET /assets/img/showcase/cashapp/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"15b49-181c32f8597"
Content-Type: image/png
Content-Length: 88905
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/queen.png

167.172.111.121

200 OK

122 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/queen.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1410, 8-bit colormap, non-interlaced\012- data
Size
122 kB (122209 bytes)
Hash
9c54076b97fea2b5d9e431c28283327b
96e460534e09e5c429494fe45b789666f1ef6c41
1690299522876e5a161d003d4e7f6a4a1ee726ce8a03cae363b7fc09c121d6be

HTTP Headers

GET /assets/img/showcase/paypal/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1dd61-181c32f85cf"
Content-Type: image/png
Content-Length: 122209
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/paypal/dress.png

167.172.111.121

200 OK

383 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/paypal/dress.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1466, 8-bit colormap, non-interlaced\012- data
Size
383 kB (383189 bytes)
Hash
b3242e37555bb0c7a6dc00ffa6856f05
be2608f02621e73c9f99736e938afdbd74bc8a5b
9239556549514e4c2082cbba95f60d92778d3ebb132256226df332a47686ee04

HTTP Headers

GET /assets/img/showcase/paypal/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"5d8d5-181c32f85cf"
Content-Type: image/png
Content-Length: 383189
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/gas/spinner.png

167.172.111.121

200 OK

204 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/gas/spinner.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1580, 8-bit colormap, non-interlaced\012- data
Size
204 kB (203506 bytes)
Hash
ee93fb1110cbd48fb025bce830a7a4fc
8f91ed3a83aa9be17e4ee07d857fcbc74a33cda2
ca216631854a0dec97c02229351e9a30b905943b16614da42dac4253fe1495ad

HTTP Headers

GET /assets/img/showcase/gas/spinner.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"31af2-181c32f85b3"
Content-Type: image/png
Content-Length: 203506
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/boxes.png

167.172.111.121

200 OK

93 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/boxes.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2874 x 1584, 8-bit colormap, non-interlaced\012- data
Size
93 kB (93132 bytes)
Hash
961db9b4993b823251d6049019095ba6
c5e6c933d66839c1ecf58d4d030a7580e8b7aefe
1cddf42ace4b1cf4df2a38f07a51c643fa634b4cb944433cb80ad8628575d7ed

HTTP Headers

GET /assets/img/showcase/walmart/boxes.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16bcc-181c32f85d7"
Content-Type: image/png
Content-Length: 93132
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/queen.png

167.172.111.121

200 OK

124 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/queen.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1414, 8-bit colormap, non-interlaced\012- data
Size
124 kB (123792 bytes)
Hash
fd6876f4ff74e248247a38dd1d179528
55c036b5133734cd81ae1795cc6c7f03cf014344
8e16bd1c9937ba7e75bcccdb477645b095dbf7a6362aff1f382799ef7c703ec1

HTTP Headers

GET /assets/img/showcase/walmart/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1e390-181c32f85df"
Content-Type: image/png
Content-Length: 123792
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/queen.png

167.172.111.121

200 OK

126 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/queen.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1388, 8-bit colormap, non-interlaced\012- data
Size
126 kB (125619 bytes)
Hash
72f1df22f8c836e268de313d54f886ce
fe21685235c1d47451988e0c6e440781ceab615b
47c44f776f14a077b8ac7652cc56ac72ba4304c8ca400a35d51e7c048b18417f

HTTP Headers

GET /assets/img/showcase/google_pay/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1eab3-181c32f85bf"
Content-Type: image/png
Content-Length: 125619
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/zelle/queen.png

167.172.111.121

200 OK

121 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/zelle/queen.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1414, 8-bit colormap, non-interlaced\012- data
Size
121 kB (120658 bytes)
Hash
ba5956f070adf43322f086b6901cb1f3
2722d9ba11c8fd68fc8306c8b3b834c9d34669ce
f8c18a7932f4f78dc8ccf067b7e2c7692ab3fe8903eb3a83a704b198ba414792

HTTP Headers

GET /assets/img/showcase/zelle/queen.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1d752-181c32f85ef"
Content-Type: image/png
Content-Length: 120658
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/walmart.svg

167.172.111.121

200 OK

1.3 kB

URL HTTP/1.1
rewardwinners.com/assets/img/brands/walmart.svg
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1281), with no line terminators
Size
1.3 kB (1281 bytes)
Hash
bc11f3678cf2ff707defa18ad9297635
fb755cd81fd836a85f8032183aab9d744c09bd48
51cc15d6c651f2ab5776cd18f2a28f5ed67d86d00edff12f5d43fd70a2aef971

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /assets/img/brands/walmart.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"501-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 1281
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/cashapp.svg

167.172.111.121

200 OK

37 kB

URL HTTP/1.1
rewardwinners.com/assets/img/brands/cashapp.svg
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (37225), with no line terminators
Size
37 kB (37225 bytes)
Hash
ab3502c7564bc609d4cab583c29102a9
9af32ff287951c118f883f2025e0417ab4def863
eae5c7bd8c1170658211a0527ffc58f50eda598151c63f66afb7bda354ee5f74

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /assets/img/brands/cashapp.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"9169-181c32f858f"
Content-Type: image/svg+xml
Content-Length: 37225
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/walmart/cups.png

167.172.111.121

200 OK

103 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/walmart/cups.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2878 x 1518, 8-bit colormap, non-interlaced\012- data
Size
103 kB (102586 bytes)
Hash
a2914729d7d294ff272b954a8b1af554
2144b9b159a240deb42459fc090584867d4e9ce4
5f05c51f229a6a3270a5f86dff4a4c95257d4ffeefc781999e64f4272667cba6

HTTP Headers

GET /assets/img/showcase/walmart/cups.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"190ba-181c32f85d7"
Content-Type: image/png
Content-Length: 102586
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/google_pay/dress.png

167.172.111.121

200 OK

430 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/google_pay/dress.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1600, 8-bit colormap, non-interlaced\012- data
Size
430 kB (429556 bytes)
Hash
59559bb9475a7815b11bf8612172afcb
0129f47f809e5cdeecc8ebe7ef6b9a72fd9f2e25
975a04cda24b71f1dcfa3181781eed082bbf85e8407e6f2e83502be389cc3ebb

HTTP Headers

GET /assets/img/showcase/google_pay/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"68df4-181c32f85bf"
Content-Type: image/png
Content-Length: 429556
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/showcase/cashapp/dress.png

167.172.111.121

200 OK

432 kB

URL HTTP/1.1
rewardwinners.com/assets/img/showcase/cashapp/dress.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
PNG image data, 2880 x 1590, 8-bit colormap, non-interlaced\012- data
Size
432 kB (431749 bytes)
Hash
eb35f535d8fbb534fffd42e6654978bf
1afb547b53e6508db5dd2debce5a1de81e921ac1
51790e496ffce870c298c72f6852855c7c7849f7df1d3253b04d25ea91609ce3

HTTP Headers

GET /assets/img/showcase/cashapp/dress.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"69685-181c32f859b"
Content-Type: image/png
Content-Length: 431749
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/assets/img/brands/zelle.svg

167.172.111.121

200 OK

9.2 kB

URL HTTP/1.1
rewardwinners.com/assets/img/brands/zelle.svg
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (960)
Size
9.2 kB (9189 bytes)
Hash
e4982fabee8f85c9ab0094de5760bf97
45218a9160089cd0a75a12e61c307e16a0e82534
f237436d1fd78f8b3c57eac1a6324d3e77835a4043edb5252482e88c4e833571

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /assets/img/brands/zelle.svg HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"23e5-181c32f8593"
Content-Type: image/svg+xml
Content-Length: 9189
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/apple-touch-icon.png

167.172.111.121

400 Bad Request

11 B

URL HTTP/1.1
rewardwinners.com/apple-touch-icon.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
ASCII text, with no line terminators
Size
11 B (11 bytes)
Hash
825644f747baab2c00e420dbbc39e4b3
10588307553e766ab3c7d328d948dc6754893cef
7c41b898c5da0cfa4aa049b65ef50248bce9a72d24bef4c723786431921b75aa

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 400 Bad Request
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=utf-8
Content-Length: 11
ETag: W/"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8"
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

rewardwinners.com/favicon-16x16.png

167.172.111.121

400 Bad Request

11 B

URL HTTP/1.1
rewardwinners.com/favicon-16x16.png
IP
167.172.111.121:0
ASN
#14061 DIGITALOCEAN-ASN

File type
ASCII text, with no line terminators
Size
11 B (11 bytes)
Hash
825644f747baab2c00e420dbbc39e4b3
10588307553e766ab3c7d328d948dc6754893cef
7c41b898c5da0cfa4aa049b65ef50248bce9a72d24bef4c723786431921b75aa

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: rewardwinners.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=64273bf9be63b90001c0303b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 400 Bad Request
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=utf-8
Content-Length: 11
ETag: W/"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8"
Date: Fri, 31 Mar 2023 20:00:58 GMT
Connection: keep-alive
Keep-Alive: timeout=5

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4657
Expires: Fri, 31 Mar 2023 21:18:36 GMT
Date: Fri, 31 Mar 2023 20:00:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4657
Expires: Fri, 31 Mar 2023 21:18:36 GMT
Date: Fri, 31 Mar 2023 20:00:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4657
Expires: Fri, 31 Mar 2023 21:18:36 GMT
Date: Fri, 31 Mar 2023 20:00:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4657
Expires: Fri, 31 Mar 2023 21:18:36 GMT
Date: Fri, 31 Mar 2023 20:00:59 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9859 bytes)
Hash
da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQPtHizoAMF7-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nZfXy-IsoHliuLodEocEZlH-IvmIV9G-noSmSEU1wmuMPfBx3rLJ9w==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 00:11:32 GMT
age: 71367
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.8 kB (5806 bytes)
Hash
8600e41520408df4865627256a0a0736
dffeaf1a8f73ae9f6247b9dc7f05301fefc00aef
9163d80d7b6087b804e6682a50d4f66339d339894cf1c5808f2e5c2e0b3de930

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cbd721e-872e-4eec-8eb5-363663d0ab36.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5806
x-amzn-requestid: cee5b166-592b-405e-b5f1-e36eb249ec59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUllFFooAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260156-01840fa47177285667bca060;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Jktkwc3JLU31AY5B5pC5JTjPGARjflqoJRZiD6IpF5-10IO6UNlH_Q==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 adc2002956acc4d61bfbf3b973fdf246.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:46:33 GMT
age: 80066
etag: "dffeaf1a8f73ae9f6247b9dc7f05301fefc00aef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11061 bytes)
Hash
39bdd16276747b1445a79e674a2a3347
d0676f63738484298a78b7abf7e4934c3d256065
67aa526299060c2a39c4baa10fd03f121497dccd5e765676639ed73ac529c34b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6350b4c-fa14-49e1-a21b-44b6f311dbdc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11061
x-amzn-requestid: 428128ec-c441-4ff7-9c84-880a01672b00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnVFnFf0IAMFTvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260223-185c48300f161931310fa35f;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:41:55 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: gc77o7y-moH1HuMEZFe9-00DVAda9baa-5VEPlMA4SIZDJNzQ8jUlA==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:49:08 GMT
etag: "d0676f63738484298a78b7abf7e4934c3d256065"
content-type: image/jpeg
age: 79911
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10271 bytes)
Hash
424b55535e5fd622b2fc96aac1246324
cf7cf08aa8969a86bf03695af2129686fd62fe86
c4bb26a7b2c431282b53b4df9999b9cc8e61369a79c606688a76499b31a65127

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10271
x-amzn-requestid: db0d1fe4-060a-4e61-90f3-ec9befee1295
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CkBoXGh5oAMFfzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6424afce-2e9251552b4acdcb19e02dfc;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Wed, 29 Mar 2023 21:38:22 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 1cXec9_e-KpzyTwiHaNAaf0y5i12tw7BkZTXnduS5ek7yAAZ0LXTWw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:44:51 GMT
age: 80168
etag: "cf7cf08aa8969a86bf03695af2129686fd62fe86"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6380 bytes)
Hash
8a2b8f737604b7983cf686c82599dc73
aa63be93c4cd641f09ce0d5144ef60aab21caed1
78835586bfd170fee7e6f70b2b426ed186f5aeae969459c6dcbf527ba9c0deec

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6380
x-amzn-requestid: 0a129a69-0720-47a0-8b0e-b3200de24204
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUn6E19IAMF9SQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260165-564474a42e79d1dc4eb9558f;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:45 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 3paQf8BhyRcZoZNox8660Zyzz0WaiQxJuHmDbj4wpo-rgbDdkxrYgQ==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:47:23 GMT
age: 80016
etag: "aa63be93c4cd641f09ce0d5144ef60aab21caed1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10490 bytes)
Hash
0530376e431b6563796e4abb0db0bc4e
6921f4bd83a806e1ea8247854ad4c045fa7ee298
d6371c81d5494d5e50fd5cc1cfe1ce28213dfa70ea5a94df82c9f4b3e6430a53

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba3e3682-3d0e-4ac1-8330-9ea9ebe92041.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10490
x-amzn-requestid: 0525e5c4-485e-47eb-ab95-1136e4d5c29a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CnUnTEztoAMFzMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64260161-54b47454475ff6ee4d880534;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:41 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: AdbJgoCBGJGvjP53lBj3_GWyuRF8O_fgNTPPEjUmFmyRxMQl2pgTzw==
via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 21:54:29 GMT
age: 79590
etag: "6921f4bd83a806e1ea8247854ad4c045fa7ee298"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (71)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP