Overview

URLwww.yourdatareport.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cueW91cmRhdGFyZXBvcnQuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/YWM9JTdCYWMlN0QmYWZmX3N1Yj0lN0JhZmZfc3ViJTdEJmFmZl9zdWIyPSU3QmFmZl9zdWIyJTdEJm9mZmVyX2lkPTI5JnBpZD05JnMxPSU3QnMxJTdEJnMzPSU3QmNsaWNrSWQlN0QmczQ9JTdCZmVlZElkJTdEJnM1PSU3QnpvbmVJZCU3RCZzNj0lN0JjcmVhdGl2ZUlkJTdEJnM3PSU3QmNhbXBhaWduSWQlN0Qmc2E9JTdCZmVlZElkJTdELSU3QnpvbmVJZCU3RCZzaWQxPSU3QnNpZDElN0Qmc2lkMz0lN0JzaWQzJTdEJnN1YjE9JTdCc3ViMSU3RCZ0PSU3QnQlN0QmdGlkPXVuYnRpNjM4YmM2ZjIwMDBlZjYxZQ==&action=action_tmp
IP 52.19.101.114 (Ireland)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-03 22:00:42 UTC
StatusLoading report..
IDS alerts0
Blocklist alert10
urlquery alerts No alerts detected
Tags None

Domain Summary (10)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 34.223.160.237
rewardwinners.com (45) 477722 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 20043 5528395 167.172.111.121
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 42402 34.120.237.76
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6209 23.36.77.32
ocsp.digicert.com (3) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1023 2232 93.184.220.29
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
pushbrands.g2afse.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 773 450 34.91.218.141
www.yourdatareport.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2341 1242 52.19.101.114
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5843 34.160.144.191

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-03 medium rewardwinners.com/js/app.ba1998d6.js Phishing
2022-12-03 medium rewardwinners.com/js/chunk-vendors.be25b63f.js Phishing
2022-12-03 medium rewardwinners.com/assets/fonts/font.fda9ef28.ttf Phishing
2022-12-03 medium rewardwinners.com/assets/img/brands/paypal.svg Phishing
2022-12-03 medium rewardwinners.com/js/app.ba1998d6.js Phishing
2022-12-03 medium rewardwinners.com/assets/img/brands/walmart.svg Phishing
2022-12-03 medium rewardwinners.com/assets/img/brands/cashapp.svg Phishing
2022-12-03 medium rewardwinners.com/assets/img/brands/exon.svg Phishing
2022-12-03 medium rewardwinners.com/assets/img/brands/zelle.svg Phishing
2022-12-03 medium rewardwinners.com/assets/img/brands/google-pay.svg Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.19.101.114
Date UQ / IDS / BL URL IP
2023-06-05 23:28:43 UTC 1 - 0 - 0 www.localbeauty.singles/c/462f4a167b4046a5 52.19.101.114
2023-06-05 01:48:44 UTC 0 - 0 - 2 www.moxoxom.com/c/20615ebcec30ab70 52.19.101.114
2023-06-02 11:57:23 UTC 0 - 2 - 0 www.smartfinstories.biz/c/b54962894a76cba6 52.19.101.114
2023-06-01 22:11:48 UTC 0 - 0 - 2 laxebn.unantlcipatedluck.net/ 52.19.101.114
2023-06-01 21:01:52 UTC 0 - 0 - 1 lsel.pollsandpromotions.site/c/4182ef8a9b09fd (...) 52.19.101.114


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-06-05 23:34:17 UTC 0 - 1 - 74 rb.gy/2wd3i 99.83.245.29
2023-06-05 23:33:51 UTC 0 - 5 - 0 itmedia.co.jp/ 52.195.115.189
2023-06-05 23:29:58 UTC 0 - 2 - 0 expertosenlinea.com.ar/alto-uso-de-cpu-en-rob (...) 3.67.181.148
2023-06-05 23:28:43 UTC 1 - 0 - 0 www.localbeauty.singles/c/462f4a167b4046a5 52.19.101.114
2023-06-05 23:28:10 UTC 0 - 0 - 33 dbs.applerewardsstore.com/ 13.229.245.147


Last 5 reports on domain: yourdatareport.com
Date UQ / IDS / BL URL IP
2023-02-09 23:00:55 UTC 0 - 0 - 10 www.yourdatareport.com/redirect/index?type=sc (...) 52.19.101.114
2023-02-04 21:01:30 UTC 0 - 0 - 10 www.yourdatareport.com/redirect/index?type=sc (...) 52.19.101.114
2023-02-04 07:01:29 UTC 0 - 0 - 10 www.yourdatareport.com/redirect/index?type=sc (...) 52.19.101.114
2023-02-01 23:01:16 UTC 0 - 0 - 10 www.yourdatareport.com/redirect/index?type=sc (...) 52.19.101.114
2023-01-31 00:01:32 UTC 0 - 0 - 9 www.yourdatareport.com/redirect/index?type=sc (...) 52.19.101.114


No other reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 4) - SHA256: b1ab1e892617f210425f658cf1d361b5489028c8771b56d845fe1c62c1fbc8b0
2022


HTTP Transactions (69)


Request Response
                                        
                                            GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cueW91cmRhdGFyZXBvcnQuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/YWM9JTdCYWMlN0QmYWZmX3N1Yj0lN0JhZmZfc3ViJTdEJmFmZl9zdWIyPSU3QmFmZl9zdWIyJTdEJm9mZmVyX2lkPTI5JnBpZD05JnMxPSU3QnMxJTdEJnMzPSU3QmNsaWNrSWQlN0QmczQ9JTdCZmVlZElkJTdEJnM1PSU3QnpvbmVJZCU3RCZzNj0lN0JjcmVhdGl2ZUlkJTdEJnM3PSU3QmNhbXBhaWduSWQlN0Qmc2E9JTdCZmVlZElkJTdELSU3QnpvbmVJZCU3RCZzaWQxPSU3QnNpZDElN0Qmc2lkMz0lN0JzaWQzJTdEJnN1YjE9JTdCc3ViMSU3RCZ0PSU3QnQlN0QmdGlkPXVuYnRpNjM4YmM2ZjIwMDBlZjYxZQ==&action=action_tmp HTTP/1.1 
Host: www.yourdatareport.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             52.19.101.114
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Sat, 03 Dec 2022 22:00:30 GMT
Content-Length: 571
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (571), with no line terminators
Size:   571
Md5:    70f732b03e7f1229375d64b946c30b5c
Sha1:   8bce9e314916b195b00448843b19065799d38b6c
Sha256: 051f67a8ef18dc9d0ff88b703b3dc2a5ddd38781a2ed5a70f48cd59a19316984
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12776
Expires: Sun, 04 Dec 2022 01:33:26 GMT
Date: Sat, 03 Dec 2022 22:00:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5925
Cache-Control: max-age=137367
Date: Sat, 03 Dec 2022 22:00:30 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 12:09:57 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18382
Expires: Sun, 04 Dec 2022 03:06:52 GMT
Date: Sat, 03 Dec 2022 22:00:30 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 21:20:00 GMT
cache-control: public,max-age=3600
age: 2430
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: aeqWkvvEd1SMDLIIjEkBwFdYtUKQnnz0+ZrXCt133DMGI6gAKTTt2jia6E1kT4zll20o6Z4MZnk=
x-amz-request-id: ZQNWVHNS2J0RA3S8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 21:46:43 GMT
age: 827
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cueW91cmRhdGFyZXBvcnQuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/YWM9JTdCYWMlN0QmYWZmX3N1Yj0lN0JhZmZfc3ViJTdEJmFmZl9zdWIyPSU3QmFmZl9zdWIyJTdEJm9mZmVyX2lkPTI5JnBpZD05JnMxPSU3QnMxJTdEJnMzPSU3QmNsaWNrSWQlN0QmczQ9JTdCZmVlZElkJTdEJnM1PSU3QnpvbmVJZCU3RCZzNj0lN0JjcmVhdGl2ZUlkJTdEJnM3PSU3QmNhbXBhaWduSWQlN0Qmc2E9JTdCZmVlZElkJTdELSU3QnpvbmVJZCU3RCZzaWQxPSU3QnNpZDElN0Qmc2lkMz0lN0JzaWQzJTdEJnN1YjE9JTdCc3ViMSU3RCZ0PSU3QnQlN0QmdGlkPXVuYnRpNjM4YmM2ZjIwMDBlZjYxZQ==&action=action_final HTTP/1.1 
Host: www.yourdatareport.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.yourdatareport.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cueW91cmRhdGFyZXBvcnQuY29t&data=aHR0cHM6Ly9wdXNoYnJhbmRzLmcyYWZzZS5jb20vY2xpY2s/YWM9JTdCYWMlN0QmYWZmX3N1Yj0lN0JhZmZfc3ViJTdEJmFmZl9zdWIyPSU3QmFmZl9zdWIyJTdEJm9mZmVyX2lkPTI5JnBpZD05JnMxPSU3QnMxJTdEJnMzPSU3QmNsaWNrSWQlN0QmczQ9JTdCZmVlZElkJTdEJnM1PSU3QnpvbmVJZCU3RCZzNj0lN0JjcmVhdGl2ZUlkJTdEJnM3PSU3QmNhbXBhaWduSWQlN0Qmc2E9JTdCZmVlZElkJTdELSU3QnpvbmVJZCU3RCZzaWQxPSU3QnNpZDElN0Qmc2lkMz0lN0JzaWQzJTdEJnN1YjE9JTdCc3ViMSU3RCZ0PSU3QnQlN0QmdGlkPXVuYnRpNjM4YmM2ZjIwMDBlZjYxZQ==&action=action_tmp
Upgrade-Insecure-Requests: 1

                                        
                                             52.19.101.114
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Sat, 03 Dec 2022 22:00:31 GMT
Content-Length: 363
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (363), with no line terminators
Size:   363
Md5:    65e2ab48b1a2a0d9b86075d32a78903a
Sha1:   0d8ade3bac02a9c6d68867f2434b9c3ca835dbda
Sha256: 1a1dca870cb60e145fd5aadc17a731b59d700c2b12c5db51180f9a4bead16323
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 03 Dec 2022 22:00:30 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 21:08:58 GMT
cache-control: public,max-age=3600
age: 3093
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4499
Cache-Control: max-age=97436
Date: Sat, 03 Dec 2022 22:00:31 GMT
Etag: "638a8f08-139"
Expires: Mon, 05 Dec 2022 01:04:27 GMT
Last-Modified: Fri, 02 Dec 2022 23:49:28 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 313

                                        
                                            GET /click?ac=%7Bac%7D&aff_sub=%7Baff_sub%7D&aff_sub2=%7Baff_sub2%7D&offer_id=29&pid=9&s1=%7Bs1%7D&s3=%7BclickId%7D&s4=%7BfeedId%7D&s5=%7BzoneId%7D&s6=%7BcreativeId%7D&s7=%7BcampaignId%7D&sa=%7BfeedId%7D-%7BzoneId%7D&sid1=%7Bsid1%7D&sid3=%7Bsid3%7D&sub1=%7Bsub1%7D&t=%7Bt%7D&tid=unbti638bc6f2000ef61e HTTP/1.1 
Host: pushbrands.g2afse.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.yourdatareport.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             34.91.218.141
HTTP/2 302 Found
                                            
server: nginx
date: Sat, 03 Dec 2022 22:00:31 GMT
content-length: 0
location: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=638bc6ffa1347100010fc1cc; expires=Sun, 03 Dec 2023 22:00:31 GMT; secure; SameSite=None afoffers={"29":1670104831}; expires=Sun, 03 Dec 2023 22:00:31 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5904
Cache-Control: max-age=132284
Date: Sat, 03 Dec 2022 22:00:31 GMT
Etag: "638b11ab-1d7"
Expires: Mon, 05 Dec 2022 10:45:15 GMT
Last-Modified: Sat, 03 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: e/jGTddiGu06Ej7eHSr9Sg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             34.223.160.237
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pAkYoyf9ijtSylCruB1+7Pj9Smc=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "FC514E82348E655BC71509201A059A4F1FCAEE212A6BAD8EEB142D488659F43B"
Last-Modified: Sat, 03 Dec 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 04 Dec 2022 04:00:32 GMT
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive

                                        
                                            GET /?s1=9_&s2=638bc6ffa1347100010fc1cc HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.yourdatareport.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Length: 24364
ETag: W/"5f2c-DvOnfiYdL6WS82KiT0POb69aujQ"
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   24364
Md5:    6fa7359a6a7cf13382ed1c3521b4546d
Sha1:   0ef3a77e261d2fa592f362a24f43ce6faf5aba34
Sha256: 4f745b4419e555c5f7c50dd19d393248456e9e7de469362a426cf7c629fc01ac
                                        
                                            GET /assets/css/app.88835c8e.css HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 31 Jul 2022 14:24:19 GMT
ETag: W/"34ba-18254a4bf4e"
Content-Length: 13498
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  ASCII text
Size:   13498
Md5:    5c5529930309a4697770f210044ef38a
Sha1:   9e7c71b9150b11d7bcc8ca3e8d49e00fd97031ae
Sha256: 3f832b6bd74314b44cc7f22eecf1bb0c19b9936cfbe63f5b01bb1515336d6e4c
                                        
                                            GET /js/app.ba1998d6.js HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Length: 157
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   157
Md5:    b0f8e6746eaab670bc200d88f2b074e1
Sha1:   5106ee70f95489e5b82e6dcbe44b15565ee3ed22
Sha256: 85ff68edc7b376f105557a2635ea26b966095c578ad514a2ccc0897b55fc5ca5

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/img/bg-rewardwinners.jpg HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Mon, 13 Jun 2022 12:25:02 GMT
ETag: W/"fd61-1815d064c98"
Content-Length: 64865
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size:   64865
Md5:    6c46063d2cd8aa82cee6ff6a1ab44221
Sha1:   defcc990bf283c8812a1886644cb0323e7c322f2
Sha256: 508a4d715504c6b7e0fa672d4bd13756d46dcc457bd4c14ad800c5302bb04a0a
                                        
                                            GET /js/chunk-vendors.be25b63f.js HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Length: 167
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   167
Md5:    3936d71f644fc8472b8a2a0956517f2a
Sha1:   24b085677a172e9f701b1c9bcab9143407738346
Sha256: fae303bfedb7029eb9a13810e1355c871bbc3a875543a8ca43114097e24c476a

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/fonts/font.fda9ef28.ttf HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/assets/css/app.88835c8e.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Length: 169
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   169
Md5:    d9a7aaa2284b8807e198a150c7ca7369
Sha1:   522acdd0c0b24e33898b007d1f41bbac193e5022
Sha256: 61df527d8d6fdc2fa8cb679da775b46b59521d73be952a07547d7a4b3d25fecf

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/img/showcase/boxes_paypal.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Length: 175
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   175
Md5:    529c2531d32aefe8d90c9ef5dd7d1405
Sha1:   ccbc0dab025d4d281467d9a0bd6e0b86f95cae74
Sha256: 35909ac5cefd9631a47e7af343fbafc6fd7295285d3aade39ef388a86c92961d
                                        
                                            GET /assets/img/brands/paypal.svg HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"6f68-181c32f858f"
Content-Length: 28520
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (28520), with no line terminators
Size:   28520
Md5:    92513e972892e2e05626ba86f842d238
Sha1:   4c54b375c5b0ad3a7a000b76d939f1503001bb65
Sha256: d879ca7b08d8808c4299f37a4bbc74bdc33903509d7bac9530c653a429a1ba0e

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /js/app.ba1998d6.js HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Length: 157
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   157
Md5:    b0f8e6746eaab670bc200d88f2b074e1
Sha1:   5106ee70f95489e5b82e6dcbe44b15565ee3ed22
Sha256: 85ff68edc7b376f105557a2635ea26b966095c578ad514a2ccc0897b55fc5ca5

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/img/showcase/boxes_paypal.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Content-Security-Policy: default-src 'none'
X-Content-Type-Options: nosniff
Content-Length: 175
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   175
Md5:    529c2531d32aefe8d90c9ef5dd7d1405
Sha1:   ccbc0dab025d4d281467d9a0bd6e0b86f95cae74
Sha256: 35909ac5cefd9631a47e7af343fbafc6fd7295285d3aade39ef388a86c92961d
                                        
                                            GET /assets/img/brands/walmart.svg HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"501-181c32f858f"
Content-Length: 1281
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1281), with no line terminators
Size:   1281
Md5:    bc11f3678cf2ff707defa18ad9297635
Sha1:   fb755cd81fd836a85f8032183aab9d744c09bd48
Sha256: 51cc15d6c651f2ab5776cd18f2a28f5ed67d86d00edff12f5d43fd70a2aef971

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/img/brands/cashapp.svg HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"9169-181c32f858f"
Content-Length: 37225
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (37225), with no line terminators
Size:   37225
Md5:    ab3502c7564bc609d4cab583c29102a9
Sha1:   9af32ff287951c118f883f2025e0417ab4def863
Sha256: eae5c7bd8c1170658211a0527ffc58f50eda598151c63f66afb7bda354ee5f74

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/img/showcase/gas/boxes.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16d5b-181c32f85a3"
Content-Length: 93531
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size:   93531
Md5:    87449bdc8ba33090b9d2299593ec34f3
Sha1:   37fd74b810a9a40b644f5bacc1c74aaf30cfc26d
Sha256: 09f306db9c341f938af10d3a5fbdc91cb8e85341cb7280cc5aab2d3afbff3f3a
                                        
                                            GET /assets/img/showcase/cashapp/cups.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"15b49-181c32f8597"
Content-Length: 88905
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1338, 8-bit colormap, non-interlaced\012- data
Size:   88905
Md5:    ebb7cf2f39bc595a9e635f813dd54ee2
Sha1:   8ab85b438262a8fe9e9a398c4b56428250b11ea1
Sha256: 84a5b9f2bc0da7f364d91c2ccc938a1088850e07e7b85b4ae90b1e4d2295eb4b
                                        
                                            GET /assets/img/showcase/walmart/spinner.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Wed, 13 Jul 2022 08:44:18 GMT
ETag: W/"24f9c-181f6bafb96"
Content-Length: 151452
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1574, 8-bit colormap, non-interlaced\012- data
Size:   151452
Md5:    bd41964392e2647a1efff2d91243d91d
Sha1:   e0c425a291133b6ef58ab260d2bedfaad9eda828
Sha256: 61ee158e3ba6582aaa6dbd410ba1d5f4364b2f1d5c62f09d2c59569508a23ff9
                                        
                                            GET /assets/img/showcase/zelle/cups.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"18487-181c32f85e7"
Content-Length: 99463
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1470, 8-bit colormap, non-interlaced\012- data
Size:   99463
Md5:    5ae885804f17b3b979d7c497f3caad4a
Sha1:   7b4372666f19c5346ba8572a261019ee3600fb7a
Sha256: c7b8c10d6dd5b434de2fc377327fbe5ed6b69a74552653ce9c48546e7a668631
                                        
                                            GET /assets/img/showcase/walmart/cups.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"190ba-181c32f85d7"
Content-Length: 102586
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1518, 8-bit colormap, non-interlaced\012- data
Size:   102586
Md5:    a2914729d7d294ff272b954a8b1af554
Sha1:   2144b9b159a240deb42459fc090584867d4e9ce4
Sha256: 5f05c51f229a6a3270a5f86dff4a4c95257d4ffeefc781999e64f4272667cba6
                                        
                                            GET /assets/img/showcase/paypal/cups.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16c28-181c32f85c7"
Content-Length: 93224
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1342, 8-bit colormap, non-interlaced\012- data
Size:   93224
Md5:    94ffd2bb908f5206c88237778c1d4267
Sha1:   54c657b1a6081d62f546c15bb3410b989c543367
Sha256: 1ee7ec1b85b74175ec3c8ac38df2c85587731a53388f07b2bfc867ee487b43fc
                                        
                                            GET /assets/img/showcase/paypal/dress.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"5d8d5-181c32f85cf"
Content-Length: 383189
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1466, 8-bit colormap, non-interlaced\012- data
Size:   383189
Md5:    b3242e37555bb0c7a6dc00ffa6856f05
Sha1:   be2608f02621e73c9f99736e938afdbd74bc8a5b
Sha256: 9239556549514e4c2082cbba95f60d92778d3ebb132256226df332a47686ee04
                                        
                                            GET /assets/img/showcase/google_pay/spinner.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"2a449-181c32f85c3"
Content-Length: 173129
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1592, 8-bit colormap, non-interlaced\012- data
Size:   173129
Md5:    d50db72acb5bbc248c13bc34895ec8e4
Sha1:   2160c6e91cb6d701b30b7743e905a10856fea0af
Sha256: 7adbd7594b1d1f21427e06c398ed63bdaa99571714a9cf4d34be9a077613360b
                                        
                                            GET /assets/img/showcase/walmart/boxes.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"16bcc-181c32f85d7"
Content-Length: 93132
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2874 x 1584, 8-bit colormap, non-interlaced\012- data
Size:   93132
Md5:    961db9b4993b823251d6049019095ba6
Sha1:   c5e6c933d66839c1ecf58d4d030a7580e8b7aefe
Sha256: 1cddf42ace4b1cf4df2a38f07a51c643fa634b4cb944433cb80ad8628575d7ed
                                        
                                            GET /assets/img/showcase/cashapp/dress.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"69685-181c32f859b"
Content-Length: 431749
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1590, 8-bit colormap, non-interlaced\012- data
Size:   431749
Md5:    eb35f535d8fbb534fffd42e6654978bf
Sha1:   1afb547b53e6508db5dd2debce5a1de81e921ac1
Sha256: 51790e496ffce870c298c72f6852855c7c7849f7df1d3253b04d25ea91609ce3
                                        
                                            GET /assets/img/showcase/zelle/boxes.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"17476-181c32f85e3"
Content-Length: 95350
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size:   95350
Md5:    10f7fa34801df7a2765a1437eb7ea329
Sha1:   e5201292701c5403c05e642e6fe6564d7638efb2
Sha256: 4bb876b757715ad99a7659cfa1ac37e3417ec67a21568fba92fce24477fea6c5
                                        
                                            GET /assets/img/showcase/cashapp/spinner.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"22014-181c32f85a3"
Content-Length: 139284
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1518, 8-bit colormap, non-interlaced\012- data
Size:   139284
Md5:    379217d9772364a802bc09fbf644c41c
Sha1:   8589b281217b2e561d06d98270c3b24505a2c12f
Sha256: edef162fdf00360271eb09171e510e3427c9bed5bd0c7fa183f70b7818716cf4
                                        
                                            GET /assets/img/showcase/paypal/spinner.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"296c2-181c32f85d3"
Content-Length: 169666
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1582, 8-bit colormap, non-interlaced\012- data
Size:   169666
Md5:    84f40b4163cac49140edf8f47fec1b76
Sha1:   3e6e5f16bbf2f205d90ca7d96bca83063f641f5e
Sha256: bbaae5bf63ddded780164e7ce4979327b9f8c7f2e63d6739b098571ad8b70a69
                                        
                                            GET /assets/img/showcase/cashapp/boxes.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"137cb-181c32f8593"
Content-Length: 79819
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1450, 8-bit colormap, non-interlaced\012- data
Size:   79819
Md5:    6c7b351fb75ccba45db0ebeabd247a6c
Sha1:   74a6c505db18700326f265e0e2f67b15da9bac74
Sha256: 36bfdfc7e54820b6b4b70bcdc2a8d7c023e65b013c9c6d7b095c4c01c1b84a4c
                                        
                                            GET /assets/img/showcase/zelle/queen.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1d752-181c32f85ef"
Content-Length: 120658
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1414, 8-bit colormap, non-interlaced\012- data
Size:   120658
Md5:    ba5956f070adf43322f086b6901cb1f3
Sha1:   2722d9ba11c8fd68fc8306c8b3b834c9d34669ce
Sha256: f8c18a7932f4f78dc8ccf067b7e2c7692ab3fe8903eb3a83a704b198ba414792
                                        
                                            GET /assets/img/showcase/google_pay/dress.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"68df4-181c32f85bf"
Content-Length: 429556
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1600, 8-bit colormap, non-interlaced\012- data
Size:   429556
Md5:    59559bb9475a7815b11bf8612172afcb
Sha1:   0129f47f809e5cdeecc8ebe7ef6b9a72fd9f2e25
Sha256: 975a04cda24b71f1dcfa3181781eed082bbf85e8407e6f2e83502be389cc3ebb
                                        
                                            GET /assets/img/showcase/google_pay/queen.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1eab3-181c32f85bf"
Content-Length: 125619
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1388, 8-bit colormap, non-interlaced\012- data
Size:   125619
Md5:    72f1df22f8c836e268de313d54f886ce
Sha1:   fe21685235c1d47451988e0c6e440781ceab615b
Sha256: 47c44f776f14a077b8ac7652cc56ac72ba4304c8ca400a35d51e7c048b18417f
                                        
                                            GET /assets/img/showcase/google_pay/cups.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"18664-181c32f85b7"
Content-Length: 99940
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1328, 8-bit colormap, non-interlaced\012- data
Size:   99940
Md5:    bfa35a22084a7a8026f3d36e8ace882a
Sha1:   90451d54413bc4de68529f7c7cdf6a6805b0abc5
Sha256: 0a332e82dffd4d7ed10950eb00601c311489d3df95ec242d72e6242c9ad9941a
                                        
                                            GET /assets/img/showcase/google_pay/boxes.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1790d-181c32f85b3"
Content-Length: 96525
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1590, 8-bit colormap, non-interlaced\012- data
Size:   96525
Md5:    ccdf8e3da4ab9989e868974a67ba0420
Sha1:   a05f5b8bd2ae3428c769a67d9c937ab030d1e841
Sha256: 5056fa7494330255bb501b5221069e631ed6f220eee4619b61c312a8521c3da8
                                        
                                            GET /assets/img/showcase/gas/spinner.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"31af2-181c32f85b3"
Content-Length: 203506
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1580, 8-bit colormap, non-interlaced\012- data
Size:   203506
Md5:    ee93fb1110cbd48fb025bce830a7a4fc
Sha1:   8f91ed3a83aa9be17e4ee07d857fcbc74a33cda2
Sha256: ca216631854a0dec97c02229351e9a30b905943b16614da42dac4253fe1495ad
                                        
                                            GET /assets/img/showcase/gas/queen.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1e668-181c32f85af"
Content-Length: 124520
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1412, 8-bit colormap, non-interlaced\012- data
Size:   124520
Md5:    f19ae5105b207ed9202171e9b10c461a
Sha1:   78dd8c249dc2fdedf4b84381d78c5829cb959edb
Sha256: 1369dec5a6d5b2f747f697835d4c6a9613699cde083e836c070246e12c10b49b
                                        
                                            GET /assets/img/brands/exon.svg HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"480-181c32f858f"
Content-Length: 1152
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1151)
Size:   1152
Md5:    d0627b5aeec28a22ecb1a7085fc2894f
Sha1:   8e2778275f04f2de488c5e84bcd3904816ee52df
Sha256: 9ed1c51adf70b8626bec5d4739e870b95967c67169a9c8ed25a7e50554c18de9

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/img/brands/zelle.svg HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"23e5-181c32f8593"
Content-Length: 9189
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (960)
Size:   9189
Md5:    e4982fabee8f85c9ab0094de5760bf97
Sha1:   45218a9160089cd0a75a12e61c307e16a0e82534
Sha256: f237436d1fd78f8b3c57eac1a6324d3e77835a4043edb5252482e88c4e833571

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/img/showcase/zelle/dress.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"65551-181c32f85ef"
Content-Length: 415057
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1578, 8-bit colormap, non-interlaced\012- data
Size:   415057
Md5:    3d601e32b8c5be36d3d96a948346e44d
Sha1:   05fbe1e721305a761abc137ee5db467ac1225231
Sha256: 12321619fdc59e8ad0aba4f3be54ac260f906753255b5ae091cacf4a5b00484a
                                        
                                            GET /assets/img/showcase/paypal/boxes.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"15b4c-181c32f85c7"
Content-Length: 88908
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1590, 8-bit colormap, non-interlaced\012- data
Size:   88908
Md5:    683db024cb30805e42501500bf10aef0
Sha1:   a340328944f478a520b51e6f07d041a4be1eb394
Sha256: 0a1a708f8ddd835aa9831dd4924e2a3a81e6716d2a70d836c73765addf0f2b1c
                                        
                                            GET /assets/img/showcase/gas/cups.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1a6f1-181c32f85a7"
Content-Length: 108273
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1462, 8-bit colormap, non-interlaced\012- data
Size:   108273
Md5:    a203b399403b97d24f6338069437430b
Sha1:   132a300659a760f95274f8685bfdefc634e1bfdf
Sha256: eb19bb5c513f7fe576145adade77e13b8ab5220a821ec45b0a5792f95eae2ec7
                                        
                                            GET /assets/img/brands/google-pay.svg HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"7e1-181c32f858f"
Content-Length: 2017
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2017), with no line terminators
Size:   2017
Md5:    06d5004e90de6dcbb31c0766edd8b4f7
Sha1:   94e12d0b7e7eb30155f9fba0423ef4fe409d1f29
Sha256: 149868ad0f7e6fb94d2bc647fef93f61265ac88b3c7e7450d68c4324a6902508

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/img/showcase/cashapp/queen.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1c278-181c32f859f"
Content-Length: 115320
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1248, 8-bit colormap, non-interlaced\012- data
Size:   115320
Md5:    6fdc1ce56af238756a6de387ddcab6c6
Sha1:   e450ad983b5527f6723c04f80f3b8302b603dc14
Sha256: 661b30bc93a86048744baf895a8eb11246c0a784a0d2bdea27b4931ba8a3148e
                                        
                                            GET /assets/img/showcase/walmart/dress.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"66d65-181c32f85df"
Content-Length: 421221
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1584, 8-bit colormap, non-interlaced\012- data
Size:   421221
Md5:    9b10d1a2e72b18ea995f746525a2b513
Sha1:   b918d46573b890eb5decf48408a49c42b636d263
Sha256: 2911767bb00169f62ae9ab50b72ffda4daa4d33ceebc16deec740e81940faeb6
                                        
                                            GET /assets/img/showcase/paypal/queen.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1dd61-181c32f85cf"
Content-Length: 122209
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2880 x 1410, 8-bit colormap, non-interlaced\012- data
Size:   122209
Md5:    9c54076b97fea2b5d9e431c28283327b
Sha1:   96e460534e09e5c429494fe45b789666f1ef6c41
Sha256: 1690299522876e5a161d003d4e7f6a4a1ee726ce8a03cae363b7fc09c121d6be
                                        
                                            GET /assets/img/showcase/zelle/spinner.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"243b4-181c32f85f3"
Content-Length: 148404
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1584, 8-bit colormap, non-interlaced\012- data
Size:   148404
Md5:    b640b06650d374f0683e2f540466d5ec
Sha1:   8198afe78ef4ac6a791c66ad812471c51c384005
Sha256: 55c2db7b0c60b50a4d96ac213b80dde0d93cad41649e72183c4e34e995cef7f6
                                        
                                            GET /assets/img/showcase/walmart/queen.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"1e390-181c32f85df"
Content-Length: 123792
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2878 x 1414, 8-bit colormap, non-interlaced\012- data
Size:   123792
Md5:    fd6876f4ff74e248247a38dd1d179528
Sha1:   55c036b5133734cd81ae1795cc6c7f03cf014344
Sha256: 8e16bd1c9937ba7e75bcccdb477645b095dbf7a6362aff1f382799ef7c703ec1
                                        
                                            GET /assets/img/showcase/gas/dress.png HTTP/1.1 
Host: rewardwinners.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rewardwinners.com/?s1=9_&s2=638bc6ffa1347100010fc1cc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             167.172.111.121
HTTP/1.1 200 OK
Content-Type: image/png
                                            
X-Powered-By: Express
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: PUT, POST, GET, PATCH, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Cache-Control: public, max-age=0
Last-Modified: Sun, 03 Jul 2022 08:31:20 GMT
ETag: W/"5e194-181c32f85ab"
Content-Length: 385428
Date: Sat, 03 Dec 2022 22:00:32 GMT
Connection: keep-alive
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  PNG image data, 2874 x 1574, 8-bit colormap, non-interlaced\012- data
Size:   385428
Md5:    a4e590e2901e4bf4075f38dd87f8024e
Sha1:   7ae231ced91451cf52552e094cdb28d0f0ddf323
Sha256: a56352da8f0c9d099cd9ab400827d549136ae09060336dc7d11e47381999d6bc
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13874
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 22:00:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13874
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 22:00:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13874
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 22:00:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13874
Expires: Sun, 04 Dec 2022 01:51:47 GMT
Date: Sat, 03 Dec 2022 22:00:33 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd7dc00fa-a8d3-44bf-ba84-1998d8dd7c5a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4309
x-amzn-requestid: c824c317-e6e3-4006-9f9d-ea54e8170a4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cf2_tGErIAMF8_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63896b97-7fc523296afea4dd4b5d1de8;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 03:05:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tp50A9LYeT1RvSPImBUoQNKtarPryKb8Zacm_nxqDh-gegwdQov7Nw==
via: 1.1 40b967aa4aa18637c4b91214147f3cb4.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 03:50:52 GMT
age: 65381
etag: "544428cdad754b1bb7be3cd46a79bf078fd5b450"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    fcb89ca25035b2bbb71ae5dd175fcd40
Sha1:   544428cdad754b1bb7be3cd46a79bf078fd5b450
Sha256: 36dcbbe6cd2710ee502776b4bcf32053e92b750a55e2bd4cdeadbc694c7c2699
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2pD4fv8j-zQzBZ9Pubo1-6UbvQpWMBb26ft_bn1pq9cWSCXsPXPW3g==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:53:25 GMT
age: 428
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7591
Md5:    d147ccb10bda82b153a596c3c967cd6a
Sha1:   ffd0763f997e71a8c1458523fc17cafe8849dfdf
Sha256: 1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 06:00:50 GMT
age: 57583
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6174
Md5:    b986f9fcbeca91ed5c8d58fbfaf47d19
Sha1:   6e6c8bd2bce144cc4da1cd7be375b046b60dca79
Sha256: 07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F627a3f86-b7fa-44c4-a119-2e3d23eb8b6a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5354
x-amzn-requestid: 3d58ffea-3433-4c5c-a60b-17f6de3a33e5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cSsnvG44oAMFfyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638427ca-63b375f04189b7ce7d84cd5d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 03:15:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GBhAilKMKo9RvIzqzF9V4jTZbvpa2rPZeoy6Jy8fMc1-JO078OAYzQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 05:53:40 GMT
age: 58013
etag: "65c8b4abf957f9b54d99d0f78559e639adb29efb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5354
Md5:    1e74254b3fdce7d6b84a71a7aff43789
Sha1:   65c8b4abf957f9b54d99d0f78559e639adb29efb
Sha256: f278c3cc6734da7188862a8c651c803e7ac1fda82234e191761453cb1359d3ee
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 22:39:04 GMT
age: 84089
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2942
Md5:    b47431190f34eccf0a6efb98e2a32b7d
Sha1:   9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
Sha256: 08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73b53015-e415-4fff-9252-8a16bbe000f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9715
x-amzn-requestid: c8102cfa-78dc-4d81-ad6a-e16b9132e238
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZO2HQKIAMF8IA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f2b-350c586b568e6565763376bd;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0QkVKyYm9UwlF5FEeli9UsRAQwEi3-c3bMR-QSJxIKRQe7WWT76dGQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:37:54 GMT
age: 1359
etag: "d4b3052021ff3ad1dc4134fa25eb12a98e7c17da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9715
Md5:    45182367fd4f8b6dd234eef1022acdb1
Sha1:   d4b3052021ff3ad1dc4134fa25eb12a98e7c17da
Sha256: a57fadaf74db2fb457cfe761314d56f021d22146f5bdb6a8bf11b6519e8a558d