| n1sav.bemobtrk.com/go/511ef243-8a62-4f04-8851-e287b972e4f2 | 3.70.16.242 | 302 Found | 512 B |
URL User Request GET HTTP/2n1sav.bemobtrk.com/go/511ef243-8a62-4f04-8851-e287b972e4f2 IP3.70.16.242:443
CertificateIssuerLet's Encrypt Subjectbemobtrk.com FingerprintC9:69:7F:7E:13:76:46:11:0E:AD:7F:F9:18:F2:E1:F3:3A:E6:ED:57 ValidityMon, 15 Apr 2024 09:02:42 GMT - Sun, 14 Jul 2024 09:02:41 GMT
File typeHTML document, ASCII text, with very long lines (512), with no line terminators Hashb22edf8818f1a0e4d07741cdd83dcadb c73f58ed450af7a7db6e6d0548c9c312dcc21dfb 8818138625451e8482133a408010a74497fcbae0b7e673dcef04e40ef54cacd4
GET /go/511ef243-8a62-4f04-8851-e287b972e4f2 HTTP/1.1
Host: n1sav.bemobtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: text/html; charset=utf-8
content-length: 512
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
access-control-allow-origin: *
location: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
set-cookie: bemob-viewer-id=cf0009db-c6d6-47fb-a778-cc192c980d3d; Domain=n1sav.bemobtrk.com; Path=/; Expires=Fri, 18 Apr 2025 06:05:49 GMT; HttpOnly; Secure; SameSite=None
bemob-uniq-visit:511ef243-8a62-4f04-8851-e287b972e4f2=1; Domain=n1sav.bemobtrk.com; Path=/; Expires=Fri, 19 Apr 2024 06:05:49 GMT; HttpOnly; Secure; SameSite=None
bemob-rotation:511ef243-8a62-4f04-8851-e287b972e4f2:random:51cd413a87266077d73a150930558ad2=0-0-0; Domain=n1sav.bemobtrk.com; Path=/; Expires=Fri, 19 Apr 2024 06:05:49 GMT; HttpOnly; Secure; SameSite=None
bemob-track-url=https%3A%2F%2Fwww.treasuregiftspot.xyz%2Ftracking%2Fprelanders%2Ffrench%2Fchad%2Fai%2Fepl%3Fclick_id%3DPFJVB3eoPvFMncaafFX26K%26bemobdata%3Dc%253D511ef243-8a62-4f04-8851-e287b972e4f2..l%253D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%253D0..b%253D0..ts%253D1713420349225; Domain=n1sav.bemobtrk.com; Path=/; Expires=Sat, 18 May 2024 06:05:49 GMT; HttpOnly; Secure; SameSite=None
vary: Accept
x-response-time: 21.350ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 | 159.69.81.25 | 301 Moved Permanently | 162 B |
URL User Request GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /tracking/prelanders/french/chad/ai/epl?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: text/html
content-length: 162
location: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/prizes/cash-2500-usd/default/default.png | 159.69.81.25 | 200 OK | 467 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/prizes/cash-2500-usd/default/default.png IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typePNG image data, 633 x 565, 8-bit/color RGBA, non-interlaced Size467 kB (467232 bytes) Hash1444002a90698f3030ddde2dacad0536 cef5b931fa4cb50dac5170c7ebf842a304709b60 a1dea4841bc6b6d281e184c4816a74671152290e9826f4813259d246e99aafb0
GET /tracking/prelanders/french/chad/ai/epl/img/prizes/cash-2500-usd/default/default.png HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: image/png
content-length: 467232
last-modified: Tue, 02 Apr 2024 09:58:30 GMT
etag: "660bd6c6-72120"
expires: Fri, 18 Apr 2025 06:05:49 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/3@0.25x.jpg | 159.69.81.25 | 200 OK | 2.5 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/3@0.25x.jpg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hashe69e56799051d24a67414a67301ac984 7d7db0281213342c25abf9e08937e38c7d1e8449 cff50b269e3afdcf620ba9a8f6d3ac55b03a953136f3148d1b3296798bf57210
GET /tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/3@0.25x.jpg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: image/jpeg
content-length: 2506
last-modified: Tue, 02 Apr 2024 09:58:29 GMT
etag: "660bd6c5-9ca"
expires: Fri, 18 Apr 2025 06:05:49 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| woudaufe.net/pfe/current/micro.tag.min.js?z=7252212&sw=/sw-check-permissions-14431.js | 139.45.197.251 | 200 OK | 17 kB |
URL GET HTTP/2woudaufe.net/pfe/current/micro.tag.min.js?z=7252212&sw=/sw-check-permissions-14431.js IP139.45.197.251:443
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subjectwoudaufe.net Fingerprint97:B7:E3:B4:46:26:82:1A:84:6C:4D:15:C2:B7:B8:FE:0F:00:67:F5 ValidityMon, 15 Apr 2024 05:41:42 GMT - Sun, 14 Jul 2024 05:41:41 GMT
File typegzip compressed data, max speed, from Unix Hash19813a1d57c14efda473bbd10a77b47f 6439987bdab307332ba4fbadbfa5d67c41df7962 fc57004d169c825787a874d10372e10bed8c0cdd7dfa056c095e10514226598b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/micro.tag.min.js?z=7252212&sw=/sw-check-permissions-14431.js HTTP/1.1
Host: woudaufe.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: application/javascript
last-modified: Tue, 16 Apr 2024 15:56:40 GMT
etag: W/"661e9fb8-8eb0"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/2@0.25x.jpg | 159.69.81.25 | 200 OK | 2.8 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/2@0.25x.jpg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hashb2f531e8c3de0e5db07f44ca7b5bf86f 59e2b7d9ca0c97cd5b28e90ed10f265c371bba38 d3239fdfc83aa0e139fb0208a4607ed6c9e7fb0265c491e6c7b68fe4cd3dbd43
GET /tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/2@0.25x.jpg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: image/jpeg
content-length: 2777
last-modified: Tue, 02 Apr 2024 09:58:29 GMT
etag: "660bd6c5-ad9"
expires: Fri, 18 Apr 2025 06:05:49 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/4@0.25x.jpg | 159.69.81.25 | 200 OK | 2.3 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/4@0.25x.jpg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash911092d329894505cfcc3b9a1db7c548 6621c151f10fc70d6bdc6661c1125e7e9548004e d44edb499b5b0bbe67ad1f0cf66ee2b48bf1d8970df5b4228719723aa4350b5d
GET /tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/4@0.25x.jpg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: image/jpeg
content-length: 2318
last-modified: Tue, 02 Apr 2024 09:58:28 GMT
etag: "660bd6c4-90e"
expires: Fri, 18 Apr 2025 06:05:49 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/1@0.25x.jpg | 159.69.81.25 | 200 OK | 2.7 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/1@0.25x.jpg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hashf6e3a67650de11010b3ca1737b1cfd27 48672c9fff3f99e34c3e9401c227bf410ed8687c 57f54232bd5657f67155f882563c2bd6c4de06d04e0515452fdeffb5aa422d85
GET /tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/1@0.25x.jpg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: image/jpeg
content-length: 2689
last-modified: Tue, 02 Apr 2024 09:58:28 GMT
etag: "660bd6c4-a81"
expires: Fri, 18 Apr 2025 06:05:50 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/prizes/cash-2500-usd/default/proof.png | 159.69.81.25 | 200 OK | 196 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/prizes/cash-2500-usd/default/proof.png IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typePNG image data, 394 x 220, 8-bit/color RGBA, non-interlaced Size196 kB (195983 bytes) Hashdc8ef3f2d7652fcf1fbb5e43948234d7 da5806364ca07e6d32b8febeb0348fdd013ca6cc c4781dc8b700689684c260ad626fc8e2ae35f7e6929ae2d718622a9b4711e96f
GET /tracking/prelanders/french/chad/ai/epl/img/prizes/cash-2500-usd/default/proof.png HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: image/png
content-length: 195983
last-modified: Tue, 02 Apr 2024 09:58:30 GMT
etag: "660bd6c6-2fd8f"
expires: Fri, 18 Apr 2025 06:05:50 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/1@0.25x.jpg | 159.69.81.25 | 200 OK | 2.9 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/1@0.25x.jpg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash4ccf612375cb7df45e271ecd2983281e db4bc5414c30c39531e38c9a3f34b087cd68b4b6 75f237c0722d2dd3ef7d7e4bad43a70ac57bad90c81b9cb8b9c9b445c0a76a1b
GET /tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/1@0.25x.jpg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: image/jpeg
content-length: 2853
last-modified: Tue, 02 Apr 2024 09:58:29 GMT
etag: "660bd6c5-b25"
expires: Fri, 18 Apr 2025 06:05:50 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/5@0.25x.jpg | 159.69.81.25 | 200 OK | 2.8 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/5@0.25x.jpg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hashc9dca6219116216184689f3eee04d4a2 f60789b7172adea2c6f9ab2c648e1491dd608199 997176683f0ac64d4b5554fc1e169939b6f19631fe1564874f3d62b8090c35f2
GET /tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/5@0.25x.jpg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: image/jpeg
content-length: 2841
last-modified: Tue, 02 Apr 2024 09:58:28 GMT
etag: "660bd6c4-b19"
expires: Fri, 18 Apr 2025 06:05:50 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/5@0.25x.jpg | 159.69.81.25 | 200 OK | 2.8 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/5@0.25x.jpg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash6063e3355d6e928b55810c359ee1d382 a6a19cb61b8a8f9ed538a6467a7a41ed85fc01ad 9db1c16bd8c27942b3d83cff9d81462ced2b7827ab45fe53ff3fcec32ed138d9
GET /tracking/prelanders/french/chad/ai/epl/img/profiles/mena/female/5@0.25x.jpg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: image/jpeg
content-length: 2787
last-modified: Tue, 02 Apr 2024 09:58:29 GMT
etag: "660bd6c5-ae3"
expires: Fri, 18 Apr 2025 06:05:50 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/img/envelope-closed.png | 159.69.81.25 | 200 OK | 16 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/img/envelope-closed.png IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typePNG image data, 325 x 222, 8-bit/color RGBA, non-interlaced Hash4266ed665f4a10a09cce637f5d1231ff 35c098d891d2cae566f2f85a9fa03a4331a862b9 57c788500da97417a98a3868f38b2559d8089e04336b1c25345169aad53f571b
GET /tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/img/envelope-closed.png HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: image/png
content-length: 16242
last-modified: Tue, 02 Apr 2024 09:58:30 GMT
etag: "660bd6c6-3f72"
expires: Fri, 18 Apr 2025 06:05:50 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/img/fb-like.svg | 159.69.81.25 | 200 OK | 2.6 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/img/fb-like.svg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeSVG Scalable Vector Graphics image Hash9300a13d0155ce253fef23732456e437 15619ae11b1d4c0a9bc22acabbd11201923ab81b f093971590dc0d67084f2a085b3a628639727b2950288cd95e3117e9e307a4bf
GET /tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/img/fb-like.svg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: image/svg+xml
last-modified: Tue, 02 Apr 2024 09:58:30 GMT
vary: Accept-Encoding
etag: W/"660bd6c6-1656"
expires: Fri, 18 Apr 2025 06:05:50 GMT
pragma: public
cache-control: max-age=31536000, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| d1u65k3qj4t7ya.cloudfront.net/carriers/airtel.svg | 54.230.241.83 | 200 OK | 860 B |
URL GET HTTP/2d1u65k3qj4t7ya.cloudfront.net/carriers/airtel.svg IP54.230.241.83:443
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashd53257de4de5a93a92e1aef76b4fa2db 47766a07f9f92bbeb115f2b26dc33dd13f3edcdb 0c86d9a3a1fe453ea3c74e8d7b1e93adbc0e957ca1025d1a0227db94beea1e4f
GET /carriers/airtel.svg HTTP/1.1
Host: d1u65k3qj4t7ya.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 860
last-modified: Fri, 01 Jul 2022 12:26:36 GMT
x-amz-storage-class: REDUCED_REDUNDANCY
accept-ranges: bytes
server: AmazonS3
date: Wed, 17 Apr 2024 08:02:37 GMT
etag: "d53257de4de5a93a92e1aef76b4fa2db"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NrolUajkWkZPIQkYiXX7eRtM-_ZdcIHQ9FMfLvwBVCCl3-uOTrfitQ==
age: 79394
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 461
Origin: https://www.treasuregiftspot.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 6b7facd2f096fc698ec3c3c8deb1d4e4
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://www.treasuregiftspot.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 463
Origin: https://www.treasuregiftspot.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: f0d066fa2d0b16b207a98ebae3739953
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://www.treasuregiftspot.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/app.css | 159.69.81.25 | 200 OK | 2.7 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/app.css IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typegzip compressed data, from Unix Hashad58cbdc1440dbe2cd8868e13833d76a 53f84df1bf88e32e1ac7fe1a58863c5d03c30d42 cf2168bd42c18e54ba4a65661376fbdb0d2a2e6e1f2be6f18b1afd5f6316d498
GET /tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/app.css HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: text/css
last-modified: Tue, 02 Apr 2024 09:37:06 GMT
vary: Accept-Encoding
etag: W/"660bd1c2-2463"
expires: Fri, 18 Apr 2025 06:05:49 GMT
pragma: public
cache-control: max-age=31536000, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.treasuregiftspot.xyz/
Origin: https://www.treasuregiftspot.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://www.treasuregiftspot.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashbb47267959ed826fe6d1ab7776227000 242d3084a54367432295c225eacb60a34c191267 740f14770e64fb2f58028c2d6bb013fd0e731e0c72ca5ac83095ba79fe5ed81c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.treasuregiftspot.xyz/
Content-Type: application/json
Content-Length: 1075
Origin: https://www.treasuregiftspot.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://www.treasuregiftspot.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/sw-check-permissions-14431.js?zoneId=7252212 | 159.69.81.25 | 200 OK | 8.1 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/sw-check-permissions-14431.js?zoneId=7252212 IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typegzip compressed data, from Unix Hash90087751cb27a8a69117e1029120fe3d e0a6e08656842cfdb76b6bb4a18a7a7f50f31ae3 b230024c9d50dd49cfd64d0841c80eeef7cf59800c332a84d0e6dcaa18ed49c7
GET /sw-check-permissions-14431.js?zoneId=7252212 HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 27 Mar 2024 13:56:05 GMT
vary: Accept-Encoding
etag: W/"66042575-236"
expires: Fri, 18 Apr 2025 06:05:50 GMT
pragma: public
cache-control: max-age=31536000, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/app.js | 159.69.81.25 | 200 OK | 147 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/app.js IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size147 kB (147284 bytes) Hash14a8552b9b5b64e53cf11c34cf64e608 bcfb388690a43f4824a6096908806846a038b7e2 db7026ed4bd37a532be736f0e425027c7104c56a9caa1f3e34a25fa3f6434d28
GET /tracking/prelanders/french/chad/ai/epl/landers/envelope-prize/assets/app.js HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 02 Apr 2024 09:37:06 GMT
vary: Accept-Encoding
etag: W/"660bd1c2-23f54"
expires: Fri, 18 Apr 2025 06:05:49 GMT
pragma: public
cache-control: max-age=31536000, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 | 159.69.81.25 | 200 OK | 8.3 kB |
URL User Request GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (8556), with no line terminators Hash892efa61caef748921dea04ce07d9017 dd02b4f60fbf753bdd278ba02f2061ab59817a45 35fca9360cb4fe98fe1871231053ab376de0c096989a74e039ea9f33d3d729a6
GET /tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: text/html; charset=utf-8
last-modified: Tue, 02 Apr 2024 09:24:04 GMT
vary: Accept-Encoding
etag: W/"660bceb4-204e"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/2@0.25x.jpg | 159.69.81.25 | 200 OK | 2.3 kB |
URL GET HTTP/2www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/2@0.25x.jpg IP159.69.81.25:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subject*.treasuregiftspot.xyz Fingerprint47:C0:6C:5D:BE:1D:F5:23:05:7B:0D:8B:A8:97:0B:7D:03:F5:6A:5A ValidityThu, 04 Apr 2024 11:49:16 GMT - Wed, 03 Jul 2024 11:49:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash07ee3d87dba4f97110c83432fcc8f3f6 80f21d2258991eaecca028683f58b16019bf9deb 50479fd6ff7c08b64aa01f0a415bba20d8ddd79a43becae604955e9086098cff
GET /tracking/prelanders/french/chad/ai/epl/img/profiles/mena/male/2@0.25x.jpg HTTP/1.1
Host: www.treasuregiftspot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:49 GMT
content-type: image/jpeg
content-length: 2258
last-modified: Tue, 02 Apr 2024 09:58:28 GMT
etag: "660bd6c4-8d2"
expires: Fri, 18 Apr 2025 06:05:49 GMT
pragma: public
cache-control: max-age=31536000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| woudaufe.net/zone?&pub=0&zone_id=7252212&is_mobile=false&domain=www.treasuregiftspot.xyz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.500&trace_id=714d401a-5adc-45f5-b6ce-40cfff05e4a7&action=prerequest | 139.45.197.251 | 200 OK | 0 B |
URL POST HTTP/2woudaufe.net/zone?&pub=0&zone_id=7252212&is_mobile=false&domain=www.treasuregiftspot.xyz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.500&trace_id=714d401a-5adc-45f5-b6ce-40cfff05e4a7&action=prerequest IP139.45.197.251:443
Requested byhttps://www.treasuregiftspot.xyz/tracking/prelanders/french/chad/ai/epl/?click_id=PFJVB3eoPvFMncaafFX26K&bemobdata=c%3D511ef243-8a62-4f04-8851-e287b972e4f2..l%3D661c6ff6-cdbf-4a3c-99a9-fb2522ff2f8f..a%3D0..b%3D0..ts%3D1713420349225 CertificateIssuerLet's Encrypt Subjectwoudaufe.net Fingerprint97:B7:E3:B4:46:26:82:1A:84:6C:4D:15:C2:B7:B8:FE:0F:00:67:F5 ValidityMon, 15 Apr 2024 05:41:42 GMT - Sun, 14 Jul 2024 05:41:41 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /zone?&pub=0&zone_id=7252212&is_mobile=false&domain=www.treasuregiftspot.xyz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.500&trace_id=714d401a-5adc-45f5-b6ce-40cfff05e4a7&action=prerequest HTTP/1.1
Host: woudaufe.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.treasuregiftspot.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.treasuregiftspot.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:05:50 GMT
content-length: 0
x-trace-id: 4c0bdaac0578d0495fb7aea4d8ab379a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://www.treasuregiftspot.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|