Report - egift.activationspot.com/egift?tid=

Report Overview

Visited public
2025-06-17 09:08:50
Tags
URL
egift.activationspot.com/egift?tid=
Finishing URL
egift.activationspot.com/egift?tid=
IP / ASN
44.241.28.24
#16509 AMAZON-02
Title
activationspot.com

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ct.captcha-delivery.com	42546	2019-12-23	2020-02-05	2025-06-15	425 B	14 kB	54.240.174.71
dd.prod.captcha-delivery.com	unknown	2019-12-23	2022-04-28	2025-06-15	1.1 kB	26 kB	54.240.174.31
geo.captcha-delivery.com	43337	2019-12-23	2020-03-18	2025-06-15	3.0 kB	1.2 MB	13.50.6.43
egift.activationspot.com	242841	2009-10-02	2015-01-16	2025-05-19	1.8 kB	5.5 kB	44.241.28.24
static.captcha-delivery.com	38537	2019-12-23	2020-05-12	2025-06-12	3.6 kB	62 kB	108.157.214.92

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	egift.activationspot.com/egift?tid=	ScriptElement	372 B	2025-06-17	2025-06-17
Pretty URL egift.activationspot.com/egift?tid= IP 44.241.28.24 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-17 09:08 Last Seen2025-06-17 09:08 Times Seen1 Hash 98e7456e3ded0da1c21a36d347e274ac bcc7bacbd941365a6aa2fb595c22198153d203de 60e3aa427355b180a182bb6e2261f97ad06ed91e2ad6edd66ab8b2768186965d Loading...

	ct.captcha-delivery.com/i.js	ScriptElement	13 kB	2025-02-18	2025-06-23
Pretty URL ct.captcha-delivery.com/i.js IP 54.240.174.71 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2025-02-18 06:11 Last Seen2025-06-23 04:02 Times Seen1027 Hash c289d6c8b0e743fd024d52618d546f20 cd29405db7518c6943bacc943ac35c3d314ac722 8d973ba5eafa4328ff1feaefd70cccd0472b8af0c006285ba63eed00977935cc Loading...

	geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd	ScriptElement	2.5 kB	2024-10-14	2025-06-19
Pretty URL geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd IP 13.50.6.43 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-10-14 17:55 Last Seen2025-06-19 12:30 Times Seen17 Hash 3e74049fdfa6b855fdded9ac110e60c7 7f4d3995c0106b3a2606548a50d79541c6f95a8e 526a2a7cbf8bd167829bb35e3158b9c387283ec3dd9a8379842fc1b8a374bf01 Loading...

	geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd	ScriptElement	551 kB	2025-06-17	2025-06-17
Pretty URL geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd IP 13.50.6.43 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-17 09:08 Last Seen2025-06-17 09:08 Times Seen1 Hash 059f00bc0aeea115fb1f22c1f5a1e644 e2a4391269966d1db365e7df8565dd9281bb5509 1f2df2af2fd4d525a71d69eba8d23871749c36762018acbaa0a126c7375935a0 Loading...

HTTP Transactions (16)

	URL	IP	Response	Size
	GET static.captcha-delivery.com/common/fonts/roboto/font-face.css	108.157.214.92	200 OK	519 B
URL GET static.captcha-delivery.com/common/fonts/roboto/font-face.css IP 108.157.214.92:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type ASCII text Size 519 B (519 bytes) Hash e4f77074c0ffbfab377011e19283eb13 9160259165ca1ef84209d4dd675c3ed367babff1 66599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51 HTTP Headers `GET /common/fonts/roboto/font-face.css HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css content-length: 519 last-modified: Fri, 19 Jul 2024 12:42:09 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 17 Jun 2025 01:11:54 GMT etag: "e4f77074c0ffbfab377011e19283eb13" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: 8ZAInf5YqMg6BwyRxfbCcZjY4FdejPCBpcDx7iWHYCgCZDNKSVhT5g== age: 29433 X-Firefox-Spdy: h2

	GET ct.captcha-delivery.com/i.js	54.240.174.71	200 OK	13 kB
URL GET ct.captcha-delivery.com/i.js IP 54.240.174.71:443 ASN #16509 AMAZON-02 Requested by https://egift.activationspot.com/egift?tid= Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type JavaScript source, ASCII text Size 13 kB (12996 bytes) Hash c289d6c8b0e743fd024d52618d546f20 cd29405db7518c6943bacc943ac35c3d314ac722 8d973ba5eafa4328ff1feaefd70cccd0472b8af0c006285ba63eed00977935cc HTTP Headers `GET /i.js HTTP/1.1 Host: ct.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://egift.activationspot.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: application/javascript content-length: 12996 last-modified: Mon, 17 Feb 2025 09:53:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Mon, 16 Jun 2025 12:47:05 GMT etag: "c289d6c8b0e743fd024d52618d546f20" x-cache: Hit from cloudfront via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: PwrZBUNPbNultX97vD5Jg2iseRMdCE6cqJy8aUYbbJoDvXlsDh7Gpg== age: 73286 X-Firefox-Spdy: h2

	GET dd.prod.captcha-delivery.com/image/2025-06-17/d21dd9989aba658829ab079afde97555.frag.png	54.240.174.31	200 OK	7.6 kB
URL GET dd.prod.captcha-delivery.com/image/2025-06-17/d21dd9989aba658829ab079afde97555.frag.png IP 54.240.174.31:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir Certificate IssuerAmazon Subjectdd.prod.captcha-delivery.com Fingerprint78:DE:FA:F7:3D:63:84:2A:F7:68:BE:5E:19:5C:02:C6:7A:A4:A2:DA ValidityMon, 27 Jan 2025 00:00:00 GMT - Wed, 25 Feb 2026 23:59:59 GMT File type PNG image data, 63 x 155, 8-bit/color RGBA, non-interlaced Size 7.6 kB (7583 bytes) Hash ec982c5d0f2b24912a7a6ad8165e85fb e45c543bad25000eb1a997fca02e93bacd75abd2 652216c843eea6358e2eb4a0da8e39dac55399bf00d1d7d981795555f8476d2b HTTP Headers GET /image/2025-06-17/d21dd9989aba658829ab079afde97555.frag.png HTTP/1.1 Host: dd.prod.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: binary/octet-stream content-length: 7583 date: Tue, 17 Jun 2025 00:01:35 GMT access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3600 last-modified: Fri, 13 Jun 2025 05:03:00 GMT x-amz-expiration: expiry-date="Sat, 21 Jun 2025 00:00:00 GMT", rule-id="auto-clean old captchas image (7 days)" etag: "ec982c5d0f2b24912a7a6ad8165e85fb" x-amz-server-side-encryption: AES256 x-amz-version-id: Lv7hkXSQ79VWudsWUcad8LkeCtURstMT accept-ranges: bytes server: AmazonS3 vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: RvAUs2_DwbTIxRbfBJJsmmsDO6VWHVF2u7AlAVxkup9IQCz9TMwWfg== age: 32819 x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css	108.157.214.92	200 OK	6.2 kB
URL GET static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css IP 108.157.214.92:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 6.2 kB (6162 bytes) Hash 1f113f0b6d6855568c684e354bb853d1 2a2fbd27d5408fa3e53c74f04b7790ab1aea9b2c d49fce4d3745c6d9f755f6be625eb218238baec337cfdb30be0e87d8c0ff6653 HTTP Headers GET /captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: text/css date: Tue, 17 Jun 2025 01:16:32 GMT last-modified: Thu, 11 Apr 2024 08:21:58 GMT content-encoding: gzip x-amz-server-side-encryption: AES256 x-amz-version-id: null server: AmazonS3 etag: W/"1f113f0b6d6855568c684e354bb853d1" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: Lz9bnFp6ZA0USq3h55U9PDmO0RVhopbJLmaHzgzInQmpVqF2G2Hh0A== age: 28322 X-Firefox-Spdy: h2

	GET geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir	13.50.6.43	200 OK	648 kB
URL GET geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir IP 13.50.6.43:443 ASN #16509 AMAZON-02 Requested by https://egift.activationspot.com/egift?tid= Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96 ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (39075) Size 648 kB (647552 bytes) Hash 8f88437f2538035bf2d50379002fad64 785d9d307c734a343c6c18719108803c0454bf69 e3c4cc5adab09735cab73931ac0d84ddbb8931ec436e294cc8a9ff397f4e6d98 HTTP Headers GET /captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir HTTP/1.1 Host: geo.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Tue, 17 Jun 2025 09:08:33 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: Content-Encoding: gzip`

	GET egift.activationspot.com/egift?tid=	44.241.28.24	403 Forbidden	749 B
URL User Request GET egift.activationspot.com/egift?tid= IP 44.241.28.24:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectegift.blackhawknetwork.com FingerprintFC:AB:16:B2:90:82:1E:B0:E7:3B:C1:CC:1E:25:4B:85:DA:B3:A5:B4 ValidityMon, 12 Aug 2024 00:00:00 GMT - Wed, 10 Sep 2025 23:59:59 GMT File type HTML document, ASCII text, with very long lines (749), with no line terminators Size 749 B (749 bytes) Hash cf60937b53b9376cfaeb5f065dbb75db 751bd60a1e399742c2a9107e4819e01f292c29a8 fc01c9cac9d4e277b629eac8c9f8b4acd7b0ab7c41baa221a00fadf791603424 HTTP Headers GET /egift?tid= HTTP/1.1 Host: egift.activationspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: datadome=8sQ7hGSqGi5UPdbL2pwsrP_iZcdOuy1bjzqqjRaT1ojLZWj1Rw1D6GvQM_nmgXDsQv9MXO_qyD4dvZ9U04bQmTu4YcGr8bCgqZ9WZG2d9kOJsdxVzZASNcl4VbbvvL6v Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 403 Forbidden date: Tue, 17 Jun 2025 09:08:30 GMT content-type: text/html;charset=utf-8 content-length: 749 server: Apache x-datadome: protected accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory charset: utf-8 cache-control: max-age=0, private, no-cache, no-store, must-revalidate pragma: no-cache access-control-allow-credentials: true access-control-expose-headers: x-dd-b, x-set-cookie access-control-allow-origin: * x-datadome-cid: AHrlqAAAAAMADIusYpWOytkAW1oqmg== x-dd-b: 3 set-cookie: datadome=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz; Max-Age=31536000; Domain=.activationspot.com; Path=/; Secure; SameSite=Lax strict-transport-security: max-age=63072000; includeSubdomains; preload x-content-type-options: nosniff x-robots-tag: noindex, nofollow, noarchive vary: Unique-ID X-Firefox-Spdy: h2

	GET egift.activationspot.com/favicon.ico	44.241.28.24	200 OK	1.4 kB
URL GET egift.activationspot.com/favicon.ico IP 44.241.28.24:443 ASN #16509 AMAZON-02 Requested by https://egift.activationspot.com/egift?tid= Certificate IssuerAmazon Subjectegift.blackhawknetwork.com FingerprintFC:AB:16:B2:90:82:1E:B0:E7:3B:C1:CC:1E:25:4B:85:DA:B3:A5:B4 ValidityMon, 12 Aug 2024 00:00:00 GMT - Wed, 10 Sep 2025 23:59:59 GMT File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel Size 1.4 kB (1406 bytes) Hash 4fa2b94dec4e79282a739ddc0a240874 adaabfc0767325a271007ff0fb38078fb98198d9 2c743776965aaeb4f0718d2f25ed3ff1189652f78df9191507cad57aadb66a0a HTTP Headers GET /favicon.ico HTTP/1.1 Host: egift.activationspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://egift.activationspot.com/egift?tid= Cookie: datadome=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Tue, 17 Jun 2025 09:08:30 GMT content-type: image/x-icon content-length: 1406 server: Apache strict-transport-security: max-age=63072000; includeSubdomains; preload x-robots-tag: noindex, nofollow, noarchive vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers last-modified: Fri, 23 May 2025 07:36:16 GMT accept-ranges: bytes x-content-type-options: nosniff, nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/captcha/assets/tpl/device-check/index.css	108.157.214.92	200 OK	3.7 kB
URL GET static.captcha-delivery.com/captcha/assets/tpl/device-check/index.css IP 108.157.214.92:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type ASCII text Size 3.7 kB (3683 bytes) Hash d24f433ae1916185b0e4e20ed76cb64b e0c8d4c58b7d0983f9b4042bea94c014cd5ec668 f40a7b02a8a2d420aa9d4cb5b0b26a92468828984fdc4b0d1202de4e24f59859 HTTP Headers `GET /captcha/assets/tpl/device-check/index.css HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css last-modified: Thu, 08 Feb 2024 08:41:29 GMT content-encoding: gzip x-amz-server-side-encryption: AES256 x-amz-version-id: null server: AmazonS3 date: Tue, 17 Jun 2025 01:30:20 GMT etag: W/"d24f433ae1916185b0e4e20ed76cb64b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: e1Dq9CmbLc230NAwcFroXSt1AzGj-XaQJuuyNTvHQBojC8oY0Q5EaA== age: 27491 X-Firefox-Spdy: h2

	GET dd.prod.captcha-delivery.com/image/2025-06-17/d21dd9989aba658829ab079afde97555.jpg	54.240.174.31	200 OK	16 kB
URL GET dd.prod.captcha-delivery.com/image/2025-06-17/d21dd9989aba658829ab079afde97555.jpg IP 54.240.174.31:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir Certificate IssuerAmazon Subjectdd.prod.captcha-delivery.com Fingerprint78:DE:FA:F7:3D:63:84:2A:F7:68:BE:5E:19:5C:02:C6:7A:A4:A2:DA ValidityMon, 27 Jan 2025 00:00:00 GMT - Wed, 25 Feb 2026 23:59:59 GMT File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x155, components 3 Size 16 kB (16461 bytes) Hash 37d588147006ff5b80745e87cf001c99 83d3310d892831e7264d4c16d4fbfd37cab32ea0 eaf2c589b55801ae5747099e7198f75f4bcd67e125fea3aedf80ae6fbc49c51f HTTP Headers GET /image/2025-06-17/d21dd9989aba658829ab079afde97555.jpg HTTP/1.1 Host: dd.prod.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: binary/octet-stream content-length: 16461 date: Tue, 17 Jun 2025 00:01:35 GMT access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3600 last-modified: Fri, 13 Jun 2025 05:03:00 GMT x-amz-expiration: expiry-date="Sat, 21 Jun 2025 00:00:00 GMT", rule-id="auto-clean old captchas image (7 days)" etag: "37d588147006ff5b80745e87cf001c99" x-amz-server-side-encryption: AES256 x-amz-version-id: WYgyBa__yjpY3vspSWBxMLtxrUg7X7GQ accept-ranges: bytes server: AmazonS3 vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: _d4BSUa-AiXqDTHHiHRupl-dbquTxa60sibvVDyBnC6IvFp9bMHRbg== age: 32819 x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2	108.157.214.92	200 OK	16 kB
URL GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 IP 108.157.214.92:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 15688, version 1.0 Size 16 kB (15688 bytes) Hash aa23b7b4bcf2b8f0e876106bb3de69c6 106ac454ba4e503e0a1cd15e1275130918049182 cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca HTTP Headers GET /common/fonts/roboto/roboto.woff2 HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://static.captcha-delivery.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: font/woff2 content-length: 15688 access-control-allow-origin: https://geo.captcha-delivery.com access-control-allow-methods: GET, HEAD access-control-max-age: 3000 access-control-allow-credentials: true last-modified: Fri, 06 May 2022 16:47:07 GMT x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 17 Jun 2025 01:36:24 GMT etag: "aa23b7b4bcf2b8f0e876106bb3de69c6" vary: Origin x-cache: Hit from cloudfront via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: vCMlGYai3qoJSG2Oks8T6r8iNuhDPO_KhzikWDVKASqaHyBOWJko1A== age: 27132 X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/common/fonts/roboto/font-face.css	108.157.214.92	200 OK	519 B
URL GET static.captcha-delivery.com/common/fonts/roboto/font-face.css IP 108.157.214.92:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type ASCII text Size 519 B (519 bytes) Hash e4f77074c0ffbfab377011e19283eb13 9160259165ca1ef84209d4dd675c3ed367babff1 66599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51 HTTP Headers `GET /common/fonts/roboto/font-face.css HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css content-length: 519 last-modified: Fri, 19 Jul 2024 12:42:09 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 17 Jun 2025 01:11:54 GMT etag: "e4f77074c0ffbfab377011e19283eb13" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: ZhNqAnu_FjSrgNqxUTOk5xrheJcA9iHwCB64CUaBGILc0TfKUaqqHg== age: 29430 X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2	108.157.214.92	200 OK	16 kB
URL GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 IP 108.157.214.92:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 15688, version 1.0 Size 16 kB (15688 bytes) Hash aa23b7b4bcf2b8f0e876106bb3de69c6 106ac454ba4e503e0a1cd15e1275130918049182 cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca HTTP Headers GET /common/fonts/roboto/roboto.woff2 HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://static.captcha-delivery.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: font/woff2 content-length: 15688 access-control-allow-origin: https://geo.captcha-delivery.com access-control-allow-methods: GET, HEAD access-control-max-age: 3000 access-control-allow-credentials: true last-modified: Fri, 06 May 2022 16:47:07 GMT x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 17 Jun 2025 01:36:24 GMT etag: "aa23b7b4bcf2b8f0e876106bb3de69c6" vary: Origin x-cache: Hit from cloudfront via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: 5YL1tEhHtlP_jzXJRfYPLRjF8WtlZIHPqynNJ5KI-6n4Md11GfaKFg== age: 27128 X-Firefox-Spdy: h2

	POST geo.captcha-delivery.com/interstitial/	13.50.6.43	200 OK	687 B
URL POST geo.captcha-delivery.com/interstitial/ IP 13.50.6.43:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96 ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type JSON text data Size 687 B (687 bytes) Hash 8bf836ad650706df6bc00f3ad8e93cf6 e988d083685ea0c7908337e02e64671229f338fa 77f5b0f100a6b66f6f450d9fd59e66ed889f60cdde8b934c035199ca2ba2ff28 HTTP Headers POST /interstitial/ HTTP/1.1 Host: geo.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Content-Length: 5493 Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Tue, 17 Jun 2025 09:08:32 GMT Content-Type: application/json;charset=utf-8 Content-Length: 687 Connection: keep-alive`

	GET egift.activationspot.com/egift?tid=	44.241.28.24	403 Forbidden	749 B
URL User Request GET egift.activationspot.com/egift?tid= IP 44.241.28.24:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectegift.blackhawknetwork.com FingerprintFC:AB:16:B2:90:82:1E:B0:E7:3B:C1:CC:1E:25:4B:85:DA:B3:A5:B4 ValidityMon, 12 Aug 2024 00:00:00 GMT - Wed, 10 Sep 2025 23:59:59 GMT File type HTML document, ASCII text, with very long lines (749), with no line terminators Size 749 B (749 bytes) Hash 8b36212e01d8eccc318ea714b637cbfe 381680abc4caefb5584f15ad9beccc1ff8d74d19 20a4512bc0cd6d9195a3eee1894ee25013ab66d4a498837f3359068d8010dbd1 HTTP Headers `GET /egift?tid= HTTP/1.1 Host: egift.activationspot.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 403 Forbidden date: Tue, 17 Jun 2025 09:08:29 GMT content-type: text/html;charset=utf-8 content-length: 749 server: Apache x-datadome: protected accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory charset: utf-8 cache-control: max-age=0, private, no-cache, no-store, must-revalidate pragma: no-cache access-control-allow-credentials: true access-control-expose-headers: x-dd-b, x-set-cookie access-control-allow-origin: * x-datadome-cid: AHrlqAAAAAMADIusYpWOytkAW1oqmg== x-dd-b: 3 set-cookie: datadome=8sQ7hGSqGi5UPdbL2pwsrP_iZcdOuy1bjzqqjRaT1ojLZWj1Rw1D6GvQM_nmgXDsQv9MXO_qyD4dvZ9U04bQmTu4YcGr8bCgqZ9WZG2d9kOJsdxVzZASNcl4VbbvvL6v; Max-Age=31536000; Domain=.activationspot.com; Path=/; Secure; SameSite=Lax strict-transport-security: max-age=63072000; includeSubdomains; preload x-content-type-options: nosniff x-robots-tag: noindex, nofollow, noarchive vary: Unique-ID X-Firefox-Spdy: h2

	GET geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd	13.50.6.43	200 OK	558 kB
URL GET geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd IP 13.50.6.43:443 ASN #16509 AMAZON-02 Requested by https://egift.activationspot.com/egift?tid= Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintF2:9E:7E:72:25:57:E3:AF:B6:87:61:A0:0D:B1:85:B4:85:82:E6:96 ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (57914) Size 558 kB (558213 bytes) Hash 8953645586709265f36bd529e152b0b2 a0b157c0ce9da57a38b386d7b3a31e52a5f6cf74 0bfc5c79df4dc935d7c582ac37a150e103c3cc5ae861d1e47181ffdac9277f8e HTTP Headers GET /interstitial/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=~dxmSSMqiemd85nz~LoMw68nwmI9Eln8z4Ahmw50xPjDrMkzDtvebIFTIHRzcLmJzLO9SN0gbwFe9cr3VmAZoy58ELOVYu42vF2gRhMeGpIK3iuZFQXUrbB7je3Y6tiz&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&s=48269&b=1585606&dm=cd HTTP/1.1 Host: geo.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://egift.activationspot.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Tue, 17 Jun 2025 09:08:30 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip`

	GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2	108.157.214.92	200 OK	16 kB
URL GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 IP 108.157.214.92:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMADIusYpWOytkAW1oqmg==&cid=~dxmSSMqiemd85nz~LoMw4ySSbJgvQ2qMWeUbcQIWNb0~0z8BxWuK5E3bCvmt0oY_sgTUQ5UL9QeAl1ONyqUrAys9~QB7uMwSm_xIIsRNkCJK_78uft3~naI6YmqUbXU&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=b397dde049f4c8cb5ad9c5c38a73eef5a0db932e6ad4f3048202f8242b5ea938&ir=36%2C20%2C676&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint08:34:DB:37:CB:02:09:ED:82:0C:B3:27:9F:BA:AF:45:DA:77:DD:3D ValidityThu, 13 Feb 2025 00:00:00 GMT - Sat, 14 Mar 2026 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 15688, version 1.0 Size 16 kB (15688 bytes) Hash aa23b7b4bcf2b8f0e876106bb3de69c6 106ac454ba4e503e0a1cd15e1275130918049182 cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca HTTP Headers GET /common/fonts/roboto/roboto.woff2 HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://static.captcha-delivery.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: font/woff2 content-length: 15688 access-control-allow-origin: https://geo.captcha-delivery.com access-control-allow-methods: GET, HEAD access-control-max-age: 3000 access-control-allow-credentials: true last-modified: Fri, 06 May 2022 16:47:07 GMT x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 17 Jun 2025 01:36:24 GMT etag: "aa23b7b4bcf2b8f0e876106bb3de69c6" vary: Origin x-cache: Hit from cloudfront via: 1.1 bfeae0ecbffe44ad98e5cd0ae83bdb4a.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: 8MInOPpjk0dtIijJ0jqyjZ9nFKY4MKSWJPI2RSW8A1J-j1TQFL9Kcg== age: 27131 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN