firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 12 Sep 2022 08:58:11 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: q1f_WX7b3Sr1IayAQlBH3cYUBjCuKbF9SGpwpYz9iodV6plGHd9Lug==
Age: 3542
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17941
Expires: Mon, 12 Sep 2022 14:56:14 GMT
Date: Mon, 12 Sep 2022 09:57:13 GMT
Connection: keep-alive
30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
45.76.148.82301 Moved Permanently 984 B URL HTTP/1.1 30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
IP 45.76.148.82:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (651)
Hash 335949aee77d249f9b7ea9a6eeb29f7b
c958252bde50401378200b47602a72001d750185
b4e959cf6c798e4c5be1bdf8ab082715c3ac96313de83b779678a9afe7b43ae1
GET /mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 12 Sep 2022 09:57:13 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 984
Connection: keep-alive
Location: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 12 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Bd67NjSqdHqMug60uB-7k7Aax09X-PZKYWhV2UwPIRzIqE3-FijzEA==
age: 9601
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 12 Sep 2022 09:56:07 GMT
Cache-Control: max-age=3600
Expires: Mon, 12 Sep 2022 10:45:54 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fLSFEvKhG2jxs_KYu5FLONScS4pa7oX1fPYoxiWSPV1ifvK0zZ-t2A==
Age: 67
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 26e829ba5f754918e20cbd316dc4348e
ba198501da0812dd11ca3b38a51325b5de6cfa60
4352c25d4af7637a8435b0df6d042fc606d37a348e966b99fecce8a853b8ebc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5977
Cache-Control: max-age=85747
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 09:57:14 GMT
Etag: "631d9714-1d7"
Expires: Tue, 13 Sep 2022 09:46:21 GMT
Last-Modified: Sun, 11 Sep 2022 08:06:44 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
34.208.34.131101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.208.34.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eWFvCFmrW5J/G3ZpEsZf5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: r/KKQBkxff+9mEMHhEbHeaS6x8o=
30.winprizes530.digital/mm1/img/landers/prizewheel-fb/notification.png
45.76.148.82200 OK 1.1 kB URL HTTP/2 30.winprizes530.digital/mm1/img/landers/prizewheel-fb/notification.png
IP 45.76.148.82:0
File type PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data
Hash 7b01738b575fddc442dd9acb66115e0c
1a517a569f3f3cc2cd848e165666cea8cd628fec
5106d5661ed6423509ed6e07e5e67c4496d7ea551a1e8b3047e30404bb2824ba
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/landers/prizewheel-fb/notification.png HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: image/png
content-length: 1142
last-modified: Sat, 12 Mar 2022 12:53:02 GMT
etag: "476-5da04ed764434"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 611c57d71954112e0b01330f6a94bef1
1e6fbfba19014a6b0c6b47b4b29f8223041540aa
a2f157c7495f9e714d24c034179cb835bf789da87978243fbfe9fcd689990679
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2F157C7495F9E714D24C034179CB835BF789DA87978243FBFE9FCD689990679"
Last-Modified: Sun, 11 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6776
Expires: Mon, 12 Sep 2022 11:50:11 GMT
Date: Mon, 12 Sep 2022 09:57:15 GMT
Connection: keep-alive
30.winprizes530.digital/mm1/img/landers/prizewheel-fb/prizewheel_spinner.jpg
45.76.148.82200 OK 46 kB URL HTTP/2 30.winprizes530.digital/mm1/img/landers/prizewheel-fb/prizewheel_spinner.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1002x1002, components 3\012- data
Hash 595556fff9f75a1711d01f567e50bd5e
036168b916b8f328dc69306909e4771bf435216b
44274130ef786e7c98c16b53d5209a2f354488e8ff3ec76a1f1efb1c819cb85f
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: image/jpeg
content-length: 45664
last-modified: Sat, 12 Mar 2022 12:53:02 GMT
etag: "b260-5da04ed78d475"
accept-ranges: bytes
X-Firefox-Spdy: h2
oungimuk.net/pfe/current/micro.tag.min.js?z=5107519&sw=/sw-check-permissions-9dad8.js
139.45.197.251200 OK 40 kB URL HTTP/2 oungimuk.net/pfe/current/micro.tag.min.js?z=5107519&sw=/sw-check-permissions-9dad8.js
IP 139.45.197.251:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1b03711e952e2c701ce0d48797621bae
dbc884f16f81689842ec797b6095a905bee6364c
423ad691a9eb57744d31ec591dc8cf71f7e352123c9fb5dc90d8aa1ca85a1097
GET /pfe/current/micro.tag.min.js?z=5107519&sw=/sw-check-permissions-9dad8.js HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 12:32:41 GMT
etag: W/"6315ec69-1a29e"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
oungimuk.net/zone?&pub=0&zone_id=5107519&is_mobile=false&domain=30.winprizes530.digital&var=&ymid=&var_3=&dsig=&action=settings
139.45.197.251200 OK 720 B URL HTTP/2 oungimuk.net/zone?&pub=0&zone_id=5107519&is_mobile=false&domain=30.winprizes530.digital&var=&ymid=&var_3=&dsig=&action=settings
IP 139.45.197.251:0
File type JSON data\012- , ASCII text, with very long lines (719)
Hash 34271811c03433e118a34e8fbef36bb4
48c897975b8cef232dd95825d942f82835c30cea
b3d70fe51f37987932d9f4aa7a2fa93323e8802eb45947a299cb9957a8536d21
GET /zone?&pub=0&zone_id=5107519&is_mobile=false&domain=30.winprizes530.digital&var=&ymid=&var_3=&dsig=&action=settings HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://30.winprizes530.digital/
Origin: https://30.winprizes530.digital
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: application/json; charset=utf-8
content-length: 720
x-trace-id: 7f706d13003c7dd26c67c83681579299
access-control-allow-origin: https://30.winprizes530.digital
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/prizes/iphone-11-pro/default.png
45.76.148.82200 OK 95 kB URL HTTP/2 30.winprizes530.digital/mm1/img/prizes/iphone-11-pro/default.png
IP 45.76.148.82:0
File type PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Hash 8adac2b1f6fec2ad7a323668d7fcd96a
5b875ce4cc5fa5576fdcf13385c0c5b53631e691
1609915700b5b68a54051d6207d11d02cfebb54f9038e8a01e8ca67ddfb6d9e4
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/prizes/iphone-11-pro/default.png HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: image/png
content-length: 94803
last-modified: Sat, 12 Mar 2022 12:53:03 GMT
etag: "17253-5da04ed840f79"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/landers/prizewheel-fb/loader.gif
45.76.148.82200 OK 5.1 kB URL HTTP/2 30.winprizes530.digital/mm1/img/landers/prizewheel-fb/loader.gif
IP 45.76.148.82:0
File type GIF image data, version 89a, 50 x 50\012- data
Hash e5442c10c946c665cbd1e88b0fb7bff6
f64bd9f3e669c39cb5b194ecdc1926667177788b
83c3fc2fbd9e412ef801194552820088c29206e96603376faf63641f059763ed
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/landers/prizewheel-fb/loader.gif HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: image/gif
content-length: 5102
last-modified: Sat, 12 Mar 2022 12:53:02 GMT
etag: "13ee-5da04ed763494"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 5b36f6508bf779a395d4b559b41d267d
a653f55ef7e337bd259cd76d14fe2adc91c11603
91e3696c53649e8d76b738dca29ed03b8b935f9fc230c735d2fd729428742605
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 09:57:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 18:25:21 GMT
Expires: Thu, 15 Sep 2022 18:25:20 GMT
Etag: "a653f55ef7e337bd259cd76d14fe2adc91c11603"
Cache-Control: max-age=289084,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7497c7233ae8b529-OSL
my.rtmark.net/gid.js?pub=0&userId=&zoneId=5107519&checkDuplicate=true&ymid=&var=
139.45.195.8200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=&zoneId=5107519&checkDuplicate=true&ymid=&var=
IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 85ade92a547dd96f5d7bb878c3f5e1a3
62691268ba719f5aa64ba56b89c2557ca64e3a50
311e5410b903af1c0d21bc694a6e0cf68216fa75aed6758415d78fe91565388e
GET /gid.js?pub=0&userId=&zoneId=5107519&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://30.winprizes530.digital/
Origin: https://30.winprizes530.digital
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://30.winprizes530.digital
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=35ee5d1b7e54488aa8ee5066174532ae; expires=Tue, 12 Sep 2023 09:57:15 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/landers/prizewheel-fb/prizewheel_static.png
45.76.148.82200 OK 13 kB URL HTTP/2 30.winprizes530.digital/mm1/img/landers/prizewheel-fb/prizewheel_static.png
IP 45.76.148.82:0
File type PNG image data, 1002 x 1002, 8-bit colormap, non-interlaced\012- data
Hash 5138417965bdda5fcbb708103d88a84a
c47f9085be828ef0a717ceba278c13fd84fc854c
bfb40521da9376178e8de77d8c1c08db53f652b4ff1cdfef5c97e94988b19cb8
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/png
content-length: 13161
last-modified: Sat, 12 Mar 2022 12:53:02 GMT
etag: "3369-5da04ed78a595"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/profile-images/south-east-asian/female/3@0.25x.jpg
45.76.148.82200 OK 3.9 kB URL HTTP/2 30.winprizes530.digital/mm1/img/profile-images/south-east-asian/female/3@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, baseline, precision 8, 128x128, components 3\012- data
Hash d8996a573db7acb91022ed0d671a1495
175685d525ff01441445e0c585ddbf9d867de6e4
cb72127809614325373d8eaf864c013df8c0f4bace2d3e55e94c8ec5faa91753
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/profile-images/south-east-asian/female/3@0.25x.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/jpeg
content-length: 3856
last-modified: Sat, 12 Mar 2022 12:53:04 GMT
etag: "f10-5da04ed9b6fe2"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/profile-images/south-east-asian/male/3@0.25x.jpg
45.76.148.82200 OK 5.2 kB URL HTTP/2 30.winprizes530.digital/mm1/img/profile-images/south-east-asian/male/3@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, baseline, precision 8, 128x128, components 3\012- data
Hash 79428c15f4cb8d4c22f0ae8844e327d7
b34513fac8649885f2e9ce9940b26e9f7f47d8bb
7e257b9661a3c2ef7598ad3b7e10133e9a4c97cbe389f0363bd103b841d43076
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/profile-images/south-east-asian/male/3@0.25x.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/jpeg
content-length: 5238
last-modified: Sat, 12 Mar 2022 12:53:05 GMT
etag: "1476-5da04edab8ce8"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/profile-images/south-east-asian/male/10@0.25x.jpg
45.76.148.82200 OK 4.6 kB URL HTTP/2 30.winprizes530.digital/mm1/img/profile-images/south-east-asian/male/10@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, baseline, precision 8, 128x128, components 3\012- data
Hash 41a98d19c26e28b2e8365a548d788f16
f2450247e49752551c531854d2d20149fbe174ee
79db7e1ab8b884b175536810d2eca46dee31a925deee254cf71b154d23ac3cb9
GET /mm1/img/profile-images/south-east-asian/male/10@0.25x.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/jpeg
content-length: 4603
last-modified: Sat, 12 Mar 2022 12:53:05 GMT
etag: "11fb-5da04eda8dd67"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/profile-images/south-east-asian/female/6@0.25x.jpg
45.76.148.82200 OK 4.1 kB URL HTTP/2 30.winprizes530.digital/mm1/img/profile-images/south-east-asian/female/6@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, baseline, precision 8, 128x128, components 3\012- data
Hash 487c9c7e98edf8c07cd5cef5a7c3e48d
a27e943677cc67810eb71f7f889969d2ca52e390
1f49025ec428748511a8f75e7b4d47072fd0f7ce4cb4107592241570bd324356
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/profile-images/south-east-asian/female/6@0.25x.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/jpeg
content-length: 4130
last-modified: Sat, 12 Mar 2022 12:53:04 GMT
etag: "1022-5da04ed9e3ea3"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/js/landers/prizewheel-fb/app.js
45.76.148.82200 OK 46 kB URL HTTP/2 30.winprizes530.digital/mm1/js/landers/prizewheel-fb/app.js
IP 45.76.148.82:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash d9d1cf663643d2ba74298172070f6137
789955413738534a5e755196e8fbf7ece8f40a56
ee6d6af4c4ba3c1b8c027b971e9634429e5c2332fd4f1fedbef6f00662d5a1ed
GET /mm1/js/landers/prizewheel-fb/app.js HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 12:53:04 GMT
etag: W/"1d6eb-5da04ed91cb1e"
content-encoding: br
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/prizes/iphone-11-pro/proof.jpg
45.76.148.82200 OK 24 kB URL HTTP/2 30.winprizes530.digital/mm1/img/prizes/iphone-11-pro/proof.jpg
IP 45.76.148.82:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 339x450, components 3\012- data
Hash a1191aab311651f9299e0aece2833f15
d61885e2aebaaab417d8f7a8ca7870a634875f4b
d354416bac0682b8e6c1f88fddbccc1f6148cf880ef56f36a09b0a9202c624fe
GET /mm1/img/prizes/iphone-11-pro/proof.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/jpeg
content-length: 23930
last-modified: Sat, 12 Mar 2022 12:53:03 GMT
etag: "5d7a-5da04ed837339"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/profile-images/south-east-asian/female/5@0.25x.jpg
45.76.148.82200 OK 3.2 kB URL HTTP/2 30.winprizes530.digital/mm1/img/profile-images/south-east-asian/female/5@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, baseline, precision 8, 128x128, components 3\012- data
Hash f70b9555d6adfc1751ae792bbc056fdf
42b461a559a16ae58398bd3bb1d2ee4879d8dc78
ca6bae141b7eaac62d61415bf2fdd34e9434928c8fa1e4cc3e8aa060abb88bae
GET /mm1/img/profile-images/south-east-asian/female/5@0.25x.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/jpeg
content-length: 3222
last-modified: Sat, 12 Mar 2022 12:53:04 GMT
etag: "c96-5da04ed9e2f03"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/profile-images/south-east-asian/female/1@0.25x.jpg
45.76.148.82200 OK 6.0 kB URL HTTP/2 30.winprizes530.digital/mm1/img/profile-images/south-east-asian/female/1@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, baseline, precision 8, 128x128, components 3\012- data
Hash 4387f4c0cbae645d5d7442254e7cc560
99b2c3a509f515fc9e53c8b018ba6b47028afbe1
116ad309253857cb0844a375919bf6af104efc407355e64a5cabf600cc70a67b
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/profile-images/south-east-asian/female/1@0.25x.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/jpeg
content-length: 5988
last-modified: Sat, 12 Mar 2022 12:53:04 GMT
etag: "1764-5da04ed9b50a2"
accept-ranges: bytes
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/profile-images/south-east-asian/male/2@0.25x.jpg
45.76.148.82200 OK 4.5 kB URL HTTP/2 30.winprizes530.digital/mm1/img/profile-images/south-east-asian/male/2@0.25x.jpg
IP 45.76.148.82:0
File type JPEG image data, baseline, precision 8, 128x128, components 3\012- data
Hash 2444132c4b20c85e0c9526f3b35a2524
eb394ff3f1a3e2fadc7a8912e8929e218270e733
dfa6330186654634effccd2138f9ccd398bd743328b42a847ebe220c7a5dcff5
Analyzer Verdict Alert urlquery Scam / Brand infringement
GET /mm1/img/profile-images/south-east-asian/male/2@0.25x.jpg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/jpeg
content-length: 4513
last-modified: Sat, 12 Mar 2022 12:53:05 GMT
etag: "11a1-5da04eda8cdc7"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15814
Expires: Mon, 12 Sep 2022 14:20:50 GMT
Date: Mon, 12 Sep 2022 09:57:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15814
Expires: Mon, 12 Sep 2022 14:20:50 GMT
Date: Mon, 12 Sep 2022 09:57:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15814
Expires: Mon, 12 Sep 2022 14:20:50 GMT
Date: Mon, 12 Sep 2022 09:57:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15814
Expires: Mon, 12 Sep 2022 14:20:50 GMT
Date: Mon, 12 Sep 2022 09:57:16 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15814
Expires: Mon, 12 Sep 2022 14:20:50 GMT
Date: Mon, 12 Sep 2022 09:57:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7ccc33ae0c85a906f2c17db281ec790
1904722d70348235d5472c54f888d2b4b991e2aa
f48edc03624f582b05b596694b76bd784f85eb9f2ca5dd025bbea9cc2ff1f096
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6999
x-amzn-requestid: 61e3e817-fb62-47c7-b938-2dfc6a134622
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO1mlG3XIAMFo5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3629-37c2c8982c4ccf891875c59a;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:00:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: S2TR552YpZeEbhTSAn4vdXexYpvR4Lrr-LaJmfNd7LnO0L4QM8w-Dg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 03:38:55 GMT
age: 22701
etag: "1904722d70348235d5472c54f888d2b4b991e2aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/img/fb-like.svg
45.76.148.82200 OK 11 kB URL HTTP/2 30.winprizes530.digital/mm1/img/fb-like.svg
IP 45.76.148.82:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 60b7fc48a64e6b4d88e6acb53728d69b
4e3c31441799b6c6555b30320160b18de804b6fa
549ae192fa2d8156297a6c80653f30f199ede85f92830663ab76ca5255ac0534
GET /mm1/img/fb-like.svg HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:15 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 12:52:58 GMT
etag: W/"1656-5da04ed412a61"
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8625e0707046e7a3715a8dbb40b1cae2
0f44ee871ad9d0a0ddd07d0c87d54f7e72b56f78
abc4c12561be08897341d9c8104c30a289357c0907e55c46895f7fb6afb2f75d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c05fb6-7f49-4d2f-96eb-0b6c468353f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13568
x-amzn-requestid: ad06f499-3e04-414a-8a3f-6daa9e0124ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3yN1F2BIAMFoqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312fd8b-3a17f11440d2f37b23ac7f6a;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:08:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iNRnq8nMhoTo9oY379Ynb6uPW0vNyf3dNufU_HpXNfzxvhrAEKEzJQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 14:06:07 GMT
age: 71469
etag: "0f44ee871ad9d0a0ddd07d0c87d54f7e72b56f78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bb54538-5f31-44e8-8743-582e31d384e4.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bb54538-5f31-44e8-8743-582e31d384e4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63d953ea7dce676e8b1c6fcab9f8eab7
5a359aed379e554c5c9885cc8f7a3bff7447d246
428029d6b65a52758df9fd8cb284df83ca4685031126b0ab5b60764a3e2d1a27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bb54538-5f31-44e8-8743-582e31d384e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5709
x-amzn-requestid: 747b7be7-356b-4a9e-9869-4b8f71e66f53
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YMl6sHaoIAMF2lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631b5044-0c6b0f57046b79cf56ecbf39;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 14:40:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: WbzMgteMd5CxXXK6sARu-n39xAWcZiYHgkR2TCg2aNbzEXcaxS-TZQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 23:26:14 GMT
age: 37862
etag: "5a359aed379e554c5c9885cc8f7a3bff7447d246"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82cfbbd4-ab05-47a9-8f70-73405b312a0e.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82cfbbd4-ab05-47a9-8f70-73405b312a0e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 866ace739b788c7d6e9047d246985a8f
bec098ac12c44fc877555fea7b3ddb8cbef12b2d
1d8599845425acd4bf90d7da05efdd2a9c7e0b5a37efc291cdcf1a2277671429
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82cfbbd4-ab05-47a9-8f70-73405b312a0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8390
x-amzn-requestid: 43e68b0e-80fd-43ed-8f63-86ec0c94c0a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUJAPGy8IAMFsdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e5534-0d51f22d34cb67eb2319ebf1;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:37:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: e-lL-3G5SCGgrsm_9pp51JYvBtgtZB144EZPmBq6Mx16HfXYK2-nZw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:44:30 GMT
etag: "bec098ac12c44fc877555fea7b3ddb8cbef12b2d"
content-type: image/jpeg
age: 43966
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877083da-81e2-47df-adc5-ba5b0f83249c.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877083da-81e2-47df-adc5-ba5b0f83249c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6065db8d4276060fbc5f9e0ef04573bc
4077cf9a03f0fa3601bcbea161bfe762feb3a7e0
a14f6e8db246a321dbdcd8672e1914daa53cb9a27a926f63393e5ddc279e58de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877083da-81e2-47df-adc5-ba5b0f83249c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9588
x-amzn-requestid: 61cc89f2-7e05-483a-a17b-be3041e0c096
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUJK7GvaIAMFoHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e5578-068429955950e2374ca0dade;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:39:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VJtwWtz9hw9B_bK6SXcRQbN7HXqDsVD3twNaSqIkwGQeRTeAbyReFg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:55:40 GMT
age: 43296
etag: "4077cf9a03f0fa3601bcbea161bfe762feb3a7e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
30.winprizes530.digital/favicon.ico
45.76.148.82404 Not Found 0 B URL HTTP/2 30.winprizes530.digital/favicon.ico
IP 45.76.148.82:0
GET /favicon.ico HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 12 Sep 2022 09:57:16 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/js/app.js
45.76.148.82200 OK 0 B URL HTTP/2 30.winprizes530.digital/mm1/js/app.js
IP 45.76.148.82:0
GET /mm1/js/app.js HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 12:52:59 GMT
etag: W/"3d1-5da04ed4c6565"
content-encoding: br
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
45.76.148.82200 OK 0 B URL HTTP/2 30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
IP 45.76.148.82:0
GET /mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Mon, 23 May 2022 01:18:03 GMT
etag: W/"3eb0-5dfa39c93f0a4"
content-encoding: br
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/css/app.css
45.76.148.82200 OK 0 B URL HTTP/2 30.winprizes530.digital/mm1/css/app.css
IP 45.76.148.82:0
GET /mm1/css/app.css HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 12:52:58 GMT
etag: W/"136-5da04ed366c5d"
content-encoding: br
X-Firefox-Spdy: h2
30.winprizes530.digital/mm1/css/landers/prizewheel-fb/app.css
45.76.148.82200 OK 0 B URL HTTP/2 30.winprizes530.digital/mm1/css/landers/prizewheel-fb/app.css
IP 45.76.148.82:0
GET /mm1/css/landers/prizewheel-fb/app.css HTTP/1.1
Host: 30.winprizes530.digital
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://30.winprizes530.digital/mm1/mmspin1icu2.html?city=Mountain%20View&model=Desktop&brand=Desktop&isp=Google%20Cloud&cep=K0qBtHcQQd3qXucWHZqjzVgvIBATHPkXwCb92u5LRcZkkvyCxaqRhhhpYOpBcT_j26xfhGK_MolHPQx2tvn-TLKQEoaTjCCEDFxkrZwkWkRWhKQusmVn2xx3-iohU9qMrVEqUN4Cmq8iNIWtPInOjJDsZEQwZrfT68KMoXgFOp0IIuibN8Cs8May1SNu-hZ7XyTCyDQYgEGvrxh9Yp3JlSac44_d1F-43D8wBFq6q9koAw9vHUVaDYvViW0qDUm07-F8DGsJIQpPQR4vTSPOOmYT6NXJfN1EqqIr08rJyf5bj1guQZLXdfCT4Cl1qv-Aw7_4CmV-nrqyaF4w_m9GwqnQAEjf4XUmaVE5V8HV4HEzGn-SJeCX19FXfzgYE-JnCfkw3_YAUmuMhweYIRTZFcBkQtou5YskcCJntRlff-M&lptoken=16fd624997348427120b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 09:57:14 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 12 Mar 2022 12:53:01 GMT
etag: W/"b4b-5da04ed6c2271"
content-encoding: br
X-Firefox-Spdy: h2