www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
200 OK 3.8 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 38c2ab80f246a5fbb93c6b52d5917e2b
4e3bfe1669ea0543aeaad2c4aadc37b6e8890b7b
d40a5db0716628da7dec3289c1c12ce96797ad1e34902fd9f49b315f443ab307
GET /push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185 HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 22 Dec 2022 23:15:16 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Sun, 08 Jan 2023 04:04:48 GMT
ETag: W/"04857a3eb568b86273b84a464ce9a156"
Vary: Accept-Encoding
X-Cache: RefreshHit from cloudfront
Via: 1.1 830686c9072da9151c60c7f203fc4a34.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: mL42o8aqmat3w3Sb5_P1ulZxjzzwIQ8e6hKA9gfxv2Ofk74mNR6CmA==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b782882bdabaf3b08e64120922b4a4b7
2035ed7fc9fb5b6ee9715601ba43de5f94d0c0e9
3fe7d1a9a55b86ec25d02634749ccfae11f3477033ba8cd7ac4131b7948ba619
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2623
Expires: Sun, 08 Jan 2023 04:48:30 GMT
Date: Sun, 08 Jan 2023 04:04:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 516b9d6951b09439a51d5284994ed92f
5c78edb38bae36caa8e2db8ed6635a32e46c91dd
eaaf4ebc59d2a06d02b552154c5adb7c713ffc4a7f5caabcff1c2b4cd6ec5c7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3243
Expires: Sun, 08 Jan 2023 04:58:50 GMT
Date: Sun, 08 Jan 2023 04:04:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 08 Jan 2023 03:48:14 GMT
content-type: application/json
age: 993
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 89a058935fd04697c87e9441fbb466a9
59b5b08119374b1da34cff7e43a7c6dc80103f6e
3a3261f495323ff0f60067b2930b8d0e5e4e5cd6ae9b14929a88047587b735da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3A3261F495323FF0F60067B2930B8D0E5E4E5CD6AE9B14929A88047587B735DA"
Last-Modified: Sat, 07 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3457
Expires: Sun, 08 Jan 2023 05:02:24 GMT
Date: Sun, 08 Jan 2023 04:04:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4HUW6McZ/mcbb4iIGiFk21MyS6FEI0z6gt5x1ArCa0l59/CGouVBOfw/T7Xwz0aWxPPrymRz0rI=
x-amz-request-id: Y5Y8CRPY26RWJ8WK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 08 Jan 2023 03:15:36 GMT
age: 2951
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 08 Jan 2023 04:04:47 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.win-now.click/push/iPhone14/style.css
200 OK 3.3 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/style.css
IP
Hash 0f0bd904ddd8fa74af801d8c588ab7c5
43ca865b1d48282db83e8bc672c105d39f1fd0e9
539a7cb33de59bf7603c1305396166ff501e16b3d3776b80f64d6c1bb501ddd6
GET /push/iPhone14/style.css HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 07 Jan 2023 12:22:55 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:29 GMT
ETag: W/"8c24a5cb4c55b9d6cd3029f5fd2c6fe7"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 830686c9072da9151c60c7f203fc4a34.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: nlu_EeKfMds_E_6mBvGMOCETUeL45uddOZbvRI5ZfgSKd6xvcDPtpw==
Age: 56513
fly.greenlizard.click/js/pub.min.js
200 OK 1.5 kB URL HTTP/1.1 fly.greenlizard.click/js/pub.min.js
IP
File type ASCII text, with very long lines (2752)
Hash 31c303586c1b78e33984bd252b8e2644
8083e2aad4cbf8242a4e6fb53657d49552b85f82
d2c713c2734353dc0ef2896d057021e9b04f35bb7c851d920d390941769c66be
GET /js/pub.min.js HTTP/1.1
Host: fly.greenlizard.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Jan 2023 04:04:48 GMT
Content-Type: application/javascript
Content-Length: 1482
Last-Modified: Fri, 09 Sep 2022 11:46:08 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: "631b2780-5ca"
Content-Encoding: gzip
Expires: Mon, 09 Jan 2023 04:04:48 GMT
Cache-Control: max-age=86400
www.win-now.click/push/iPhone14/main_script.js
200 OK 1.0 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/main_script.js
IP
File type CSV text\012- , ASCII text
Hash dd5a4564e51804acca26ce74d07b7b8c
746758a4621b0af6a9ed68efa6f151ccf98b213b
4a4ddac04042640868a4c146c938bdaf22e13b94a686309555f0a06e805d9edb
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/main_script.js HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:24 GMT
ETag: W/"042156744b849e8d35b7083b52607c94"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 6528f10684ec39317f94ed2a540d88b4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: iwLsnRalHB2v4IC0hWzppHN1A29WGYNg1IVPrVPJGKBptu_aqr6EGQ==
www.win-now.click/push/iPhone14/1.jpeg
200 OK 1.3 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash e28a5798007788d032feee066fa01efc
af4c6ee2a4688f615cc3c2ca3bb1937c759e99d5
722d0fbdeea1aa70ebe7b7e4a731a7b778e35d0bab46ad45c711ace64166fdaa
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/1.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1258
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:14:59 GMT
ETag: "e28a5798007788d032feee066fa01efc"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 660625642e0df86c41275db1ce1ac922.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: JwbWi3EnvzQYYF8ZAd2jxtveZUu5ncT50eLAuZZIoQycLukKRZuaFQ==
www.win-now.click/push/iPhone14/6.jpeg
200 OK 1.1 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash e957fbde5c4146a2740a772ce622c1f0
f8fc768f34f4be98f8dc098b42e8559d38523b3b
337434d918a2662370261fec6d9ec095ceaa27aa3249ef323be97f8183528eef
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/6.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1092
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:04 GMT
ETag: "e957fbde5c4146a2740a772ce622c1f0"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 f13ebb34b9ca74b5ffe9e85709c21a7c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: G7tRqzfNzzIiWbTH0nCNtFKYW5a4al8ECC6jNCkK_iLbsC6xQL53DA==
www.win-now.click/push/iPhone14/8.jpeg
200 OK 1.2 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash b7f49f9e865aed63fc64a6d4c784df9e
b20038adf8b3312fae9f5f72a057d98c4f119ed8
54dc1727eabc97535b59704be621ca245f36376ee32acab675a40ff5ab1a389c
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/8.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1203
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:06 GMT
ETag: "b7f49f9e865aed63fc64a6d4c784df9e"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 a0ed8ab9bdb194ac51725369653b3802.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: -qVdFWnPCmrFCgNkmLz-uQ9uyoAaC0RJP_C-dn4xid2RyERv5HkCbA==
www.win-now.click/push/iPhone14/clip_footer_3.png
200 OK 2.5 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/clip_footer_3.png
IP
File type PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data
Hash e1b626392882cc25b4d891afaa68afd4
454d7abdbc2548d04feb95436ea0ab4126b4f00b
ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f
GET /push/iPhone14/clip_footer_3.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2460
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:10 GMT
ETag: "e1b626392882cc25b4d891afaa68afd4"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 3a4d5aad46ae3a82da414d69565389aa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: vo5TglXDfHlkCBmD6POegGgIzSLxNSaBg2Cwcop9gXmUPrLq7bDZDw==
www.win-now.click/push/iPhone14/i14wheel.jpg
200 OK 42 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/i14wheel.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 501x501, components 3\012- data
Hash 96609fbcc5f804cbe893946051325dbe
3f5a28fd0d29224836399ab8f4955c66046cd7bc
cb4e4f2e6895ba24c0ee34b0404cab1de81dfa3440b54e85a3f92e072da27b8a
GET /push/iPhone14/i14wheel.jpg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 42443
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:14 GMT
ETag: "96609fbcc5f804cbe893946051325dbe"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 830686c9072da9151c60c7f203fc4a34.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: vPUCiAPfHtoxOaDPEoFudUsIQh-Qg99yLlQIfdEm9ovo1naE-dEqmQ==
www.win-now.click/push/iPhone14/menu_2x.png
200 OK 124 B URL HTTP/1.1 www.win-now.click/push/iPhone14/menu_2x.png
IP
File type PNG image data, 40 x 36, 8-bit gray+alpha, non-interlaced\012- data
Hash 8f68efd9388ccd80b43759b2ed542305
9f2cf96efe3bdec2ab64bc51856619cc02958fe6
455b82fa1e54fc88fe0699eabecb02155f1d6228e0ae3d7f72e1abe92dae8f3c
GET /push/iPhone14/menu_2x.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 124
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:25 GMT
ETag: "8f68efd9388ccd80b43759b2ed542305"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6528f10684ec39317f94ed2a540d88b4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: 7NVuw-NzYI1T0exizQbR5zkOTFZO9ZbUzDKxNdXnwQgmPvA7D1dmqg==
www.win-now.click/push/iPhone14/spin_prize2.png
200 OK 2.8 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/spin_prize2.png
IP
File type PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data
Hash f278c8d30fc51b72e0774b9ecb49214c
03b574db82b31ee5758eb5093fda8ea25d1b00d8
43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c
GET /push/iPhone14/spin_prize2.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 2814
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:28 GMT
ETag: "f278c8d30fc51b72e0774b9ecb49214c"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 f13ebb34b9ca74b5ffe9e85709c21a7c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: 2qfkUalXC2JxAD0RnEWGi0p8rjJz-TmjyAbxOMD3N1FGR7hBDUOnoA==
www.win-now.click/push/iPhone14/notify_2x.png
200 OK 229 B URL HTTP/1.1 www.win-now.click/push/iPhone14/notify_2x.png
IP
File type PNG image data, 36 x 32, 8-bit gray+alpha, non-interlaced\012- data
Hash 988234626ae7a880ed9c6a92f6336c0f
173967c2b59baed4a06997d874aba32ab65da201
4566dd8f59a09f51415a7c8955f48f75298522fc6db554bc1a59ad79c3e3e314
GET /push/iPhone14/notify_2x.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 229
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:26 GMT
ETag: "988234626ae7a880ed9c6a92f6336c0f"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 660625642e0df86c41275db1ce1ac922.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: XRCZSIHiCiSpqzcnQc_ciBsMy7_iEIJ4it58m9F2MhBotTd-w4GTGQ==
www.win-now.click/push/iPhone14/like_user_1.jpeg
200 OK 1.3 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/like_user_1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 2aa0d43e70d60d76ac4bdff139f8c7cb
d7e3433297ad90f5d99249aee29b645265c9f3eb
e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/like_user_1.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1293
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:21 GMT
ETag: "2aa0d43e70d60d76ac4bdff139f8c7cb"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 a0ed8ab9bdb194ac51725369653b3802.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: yqJEOsY-j6PLwOBWOOHnE0dQSvmWvZVKgFV0gVZDw4AAj6hO_gm7gA==
www.win-now.click/push/iPhone14/like_user_2.jpeg
200 OK 1.2 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/like_user_2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash f9299c2023539a8f27a6e1b12ed260e5
046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2
ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/like_user_2.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1216
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:22 GMT
ETag: "f9299c2023539a8f27a6e1b12ed260e5"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 3a4d5aad46ae3a82da414d69565389aa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: 5k66aXKOmXlsmMySfoliK8LKc9I-0dQGSwnzUVgAQN-i4TpNxVU3pQ==
www.win-now.click/push/iPhone14/3.jpeg
200 OK 1.2 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/3.jpeg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3\012- data
Hash d10dfa46723e01a51116353ee511f4db
04dc2eb7734da000af852dd34d8e061055d61566
1e2f3f221d8d89df1d4ca3973eb346cd4b83ebb13df118f7278bb7a6ad35d924
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/3.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1183
Connection: keep-alive
Date: Sat, 07 Jan 2023 12:22:57 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:01 GMT
ETag: "d10dfa46723e01a51116353ee511f4db"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a0ed8ab9bdb194ac51725369653b3802.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: rSBLJpZxw6J9zBu1Ss0kMv7IH2K0XyNIu_xPsfsLMSEyRhcuZFVzmQ==
Age: 56512
www.win-now.click/push/iPhone14/action_icons_20px_2x.png
200 OK 1.7 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/action_icons_20px_2x.png
IP
File type PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data
Hash b699975b5fe73b087e711a33ff24ee1e
0e33cc5c32a5e7d18440751e3946076664caaf53
4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
GET /push/iPhone14/action_icons_20px_2x.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1726
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:08 GMT
ETag: "b699975b5fe73b087e711a33ff24ee1e"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 830686c9072da9151c60c7f203fc4a34.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: X2eavBs51sFq-63bxI5eRlCQ91D7lmOWnPT6WtH6k3UoTsbQH6apug==
www.win-now.click/push/iPhone14/comment_action_2x.png
200 OK 641 B URL HTTP/1.1 www.win-now.click/push/iPhone14/comment_action_2x.png
IP
File type PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data
Hash e9b3872b3e63e19728176d45f0aa6986
b638f89d5d80c4cd65327da973c52f778e30bd55
a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5
GET /push/iPhone14/comment_action_2x.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/style.css
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 641
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:11 GMT
ETag: "e9b3872b3e63e19728176d45f0aa6986"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 f13ebb34b9ca74b5ffe9e85709c21a7c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: o0hKe4Fawq0dY3NWHVUqe29kAsFFvXL28hpYbWIew14Gnm3-wBgr5g==
www.win-now.click/push/iPhone14/4.jpeg
200 OK 1.1 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 6f44457c62359dac93d8092d7af63672
97020a1c8bd06962b1181385963f6b72dea2c902
b5958fd2d9043b4544b807259e74bba084a26acae998d2bd522d4acc62e9f4e5
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/4.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1068
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:02 GMT
ETag: "6f44457c62359dac93d8092d7af63672"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 3a4d5aad46ae3a82da414d69565389aa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: CZ1J6fAdG_LPxcyPUDtO9dZaojffwFwbuirAky7USkB-t-a5u8pHgg==
www.win-now.click/push/iPhone14/7.jpeg
200 OK 1.1 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 546e8c9e22c52b3e47dd2fe58f139fc9
204463ece3f1e0e497463d0b30cd3c988dcd0a17
9c2388e5c4d51f01e19af1c46805ca29ce7a558aad05e3eb9e565a7dc5a1127d
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/7.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1138
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:05 GMT
ETag: "546e8c9e22c52b3e47dd2fe58f139fc9"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6528f10684ec39317f94ed2a540d88b4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: 26lM1q_I_tBt59HpL0m19v47jy7sGRQ-s-ssvZSLiw6OxcA-8Fp56Q==
www.win-now.click/push/iPhone14/2.jpeg
200 OK 1.3 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/2.jpeg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 50x50, components 3\012- data
Hash 9daf82b76b8477fa503d862af8cb74b1
541edfdc63ace3ab12f9b0cd3d79c862b1f548dc
f45eaab6cc5fad19d6aafef5daa7cf935f9139b3bcb2190eec5e1fd26a68c58d
Analyzer Verdict Alert fortinet Phishing
GET /push/iPhone14/2.jpeg HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 1254
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:00 GMT
ETag: "9daf82b76b8477fa503d862af8cb74b1"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 660625642e0df86c41275db1ce1ac922.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: EZ6gWINwKN93OxcGjbHdk4gcVjEdkSN-gfy6QkClNLfbwvTypHRjXg==
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 08 Jan 2023 03:33:42 GMT
age: 1866
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.win-now.click/push/iPhone14/footer_right.png
200 OK 4.9 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/footer_right.png
IP
File type PNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data
Hash 0e786b7344ac0b63609290a3a415fc4f
c2e77827e895aaa13522f1c5c0ef79d4caef0bb2
f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5
GET /push/iPhone14/footer_right.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4919
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:12 GMT
ETag: "0e786b7344ac0b63609290a3a415fc4f"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 830686c9072da9151c60c7f203fc4a34.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: vkJP5yzJtE9AOwCbnzEhVCXRJOWAFhd15yLojYWMYYaMu--S02P_tw==
ocsp.digicert.com/
200 OK 471 B IP
Hash 8589b6a84dd5a09ec546aff38bbd2515
1c3a3d8a69ae7a3ebda64292caf0e0f5968e81f7
f013da155203f0509d56e8174c2ae5ed23aad413b4391f276efd388519743b17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2443
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 08 Jan 2023 04:04:48 GMT
Last-Modified: Sun, 08 Jan 2023 03:24:05 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
www.win-now.click/push/iPhone14/ix-s.png
200 OK 6.3 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/ix-s.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 165x212, components 3\012- data
Hash 83dea2fa1f2cff1c3c228260b4bbef9f
069c3bb290335ec373202bd52e9b064a372acf5d
64b10a435c7d01c123b1ad3c5b6c2a3a66b95e0dd5601d6c6b5bcb786881beca
GET /push/iPhone14/ix-s.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 6271
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:20 GMT
ETag: "83dea2fa1f2cff1c3c228260b4bbef9f"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 3a4d5aad46ae3a82da414d69565389aa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: LG8IO4TOVa9dKvojcnYW2D8k6igTtKaraUKPlEwVgJNsl6lFsSu_TA==
www.win-now.click/push/iPhone14/ix-g.png
200 OK 5.8 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/ix-g.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 203x249, components 3\012- data
Hash 038a492cc0a3488f0547dafc24c15838
e49b0adb8e08131c54b71c3325b8e9cb9ce716f9
e25ba7e0c1b7e4bb61773bd32df4cf010a0d6c65e773fcc2bdc3454edf3401c0
GET /push/iPhone14/ix-g.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 5846
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:17 GMT
ETag: "038a492cc0a3488f0547dafc24c15838"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 f13ebb34b9ca74b5ffe9e85709c21a7c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: sL1_6-xpdQHkSFihhcANUCWVEF4oekZ2-9hsUz7B4a1Ogg7xWF30Kg==
www.win-now.click/push/iPhone14/ixo.png
200 OK 562 kB URL HTTP/1.1 www.win-now.click/push/iPhone14/ixo.png
IP
File type PNG image data, 423 x 880, 8-bit/color RGBA, non-interlaced\012- data
Size 562 kB (561946 bytes)
Hash 3db6e9a86a250c13268be4a224a40333
63fdc9bdf962bd044cc99800e68a7c945298e05b
0f3a2e2e7f8ab18b9513fd334f82e227911e2f0f378ddc63b8b34347f12534c6
GET /push/iPhone14/ixo.png HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 561946
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Last-Modified: Thu, 22 Dec 2022 23:15:18 GMT
ETag: "3db6e9a86a250c13268be4a224a40333"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 a0ed8ab9bdb194ac51725369653b3802.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: x_NSpFB3iQJ3DsfQOJXwX8BMFo0_VeXvqc5_1QJ3VFL0y3alIvoT9g==
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: je83n1fiUsXqUoRZvGl3VA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 75k75mGnym//EWPKgxHZ3lvbga4=
www.win-now.click/favicon.ico
403 Forbidden 243 B URL HTTP/1.1 www.win-now.click/favicon.ico
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash 3d9ba892e03e6b567deb2bf8abfb6628
068a6a44c7180f3d7d78441245c65302e6270114
2699d19e2ab2847a13ad964c8c8710957dda8080d8dce5e13f98a016bf947328
GET /favicon.ico HTTP/1.1
Host: www.win-now.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.win-now.click/push/iPhone14/index.html?cep=y3kvrd8LDHZARr90YMQ6FmPeYB72KSZsVRmejjxN-p4UEEs8fsUn7g9QmjjzTZj_4M232130yIb5tppNmV1orH4sjBqteA1GLrUDdZylP1tZS_-X5Ox9bck0-baj-o5khtMYCvQfVj_jCDfrJx1wmysDdNk8LWx5bYWV_8hqLlDclQri5qnDBWFoTCT60MNwNUIRDihfKIuYY1ybSr1UAoU7r9Sl1hlxrgpNW80sgFFSiFIvf5rl-aAdRGeanS9BhoLFP78-IbSHGSj-mmhcg5GrXaZBPbs95iNkOZFt9o78xqFRAUv6B7-yqb72EAwG6j5aITUa1qf9XtBPjhf37iYQ00fIaSLaPFV13dJ7mdk0ZIXqw9CbgM7RV0SqV3uLxxU8j8yj0Ep7j1ieS4-p4wupkvHOTXyu9qcuqsRcVto&lptoken=16da7378153024cc7185
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 08 Jan 2023 04:04:49 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 3a4d5aad46ae3a82da414d69565389aa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN54-C1
X-Amz-Cf-Id: xNCUnF85fPMfZA7r8TNZTDvz4FlX5CAkIGdZ4s-GTgP-fe6ZLvFxTA==
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3603
Expires: Sun, 08 Jan 2023 05:04:53 GMT
Date: Sun, 08 Jan 2023 04:04:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3603
Expires: Sun, 08 Jan 2023 05:04:53 GMT
Date: Sun, 08 Jan 2023 04:04:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3603
Expires: Sun, 08 Jan 2023 05:04:53 GMT
Date: Sun, 08 Jan 2023 04:04:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3603
Expires: Sun, 08 Jan 2023 05:04:53 GMT
Date: Sun, 08 Jan 2023 04:04:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 457ca75ed75785c514fb36a16792410f
fcc640c00713c93633d0b2887104c8fbc6c754f9
ff6a40bdaa6bc25eefb2d7ed130ea34460494d92c19c07dff4cc371c45d1ac44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF6A40BDAA6BC25EEFB2D7ED130EA34460494D92C19C07DFF4CC371C45D1AC44"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3603
Expires: Sun, 08 Jan 2023 05:04:53 GMT
Date: Sun, 08 Jan 2023 04:04:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6a5bbd4-1919-4077-b417-b41e672d9a6e.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6a5bbd4-1919-4077-b417-b41e672d9a6e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5932e308c4085b38b278a84896104c40
65191708bb2a103f58286fb9a3a462f0d2151a66
fd185173148b8859625f1a5ee849b1d7148e20cd034c0b3310ee1b4d4157e8e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6a5bbd4-1919-4077-b417-b41e672d9a6e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6545
x-amzn-requestid: 09faae62-96b7-4558-990b-0ac1edadb354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eTwoGHJWIAMFpVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b7c7cd-5027b261109f2a5f1348c473;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 07:03:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ul8oBio6bWHk3EfGidi3Lneeu3Igxo4LSl-nM7T30jaFeUoFJGDxaQ==
via: 1.1 536063cb28bfc05fcb7a78183dd89b72.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 13:52:42 GMT
age: 51128
etag: "65191708bb2a103f58286fb9a3a462f0d2151a66"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facf2ac81-adf8-49be-856e-9b8af1161086.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facf2ac81-adf8-49be-856e-9b8af1161086.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0546bef00f303b12de4354291c504cad
2c8e60803dee7d21b198a92aa187b23a4dce2f43
736bad079c239fa69fab918c209ba3b2a8b7b15616a49871e527d5694670df67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facf2ac81-adf8-49be-856e-9b8af1161086.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8127
x-amzn-requestid: 8111f713-0a7a-4b10-ade5-1c7aa6e06677
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDvCE_ooAMF7gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e660-2b422a7d2dc4a28b24125d1e;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GFANyQVbYkFcVTnvUq5ELpsTsgAFaYXhZGUPHWVWixXrnsH6jBavrA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 21:46:52 GMT
etag: "2c8e60803dee7d21b198a92aa187b23a4dce2f43"
content-type: image/jpeg
age: 22678
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash afcc8f4875f4b74ca0640829b689731e
584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 407fef75-2217-4da7-8ea8-b5ede48a0615
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eNKshEEvoAMFkMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b524b6-72ca4e7b3034e7ac1f3fa1ed;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 07:03:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xOpZDrVh8MsfFqh0HuJJIWFvlgIm0jUE73p9MpgRA1PO_VAv0vP2nw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 16:43:14 GMT
age: 40896
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faafe891a-901c-4e0b-9808-251ce90eb5b4.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faafe891a-901c-4e0b-9808-251ce90eb5b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 896ae4e771bb618dcf00a6f6ec183e31
ba9e0427998a33688ddcb1239fde0b1f4ed38e0d
6d2358274acf14c7d3c9445e93309f4724b7c05c6e6a8fb158ae33508a2dff71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faafe891a-901c-4e0b-9808-251ce90eb5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8941
x-amzn-requestid: 10aefec4-a4e1-4413-b4a7-8a56ea89f298
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eX-5nGrSIAMF9qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9783d-7706663a64a72ba135e25491;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 13:48:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d3IRozG_-XH1u_PHH7CDK57h00CwYvfIDGRk7DnqYuduBnimIH6_rw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 08 Jan 2023 03:31:33 GMT
age: 1997
etag: "ba9e0427998a33688ddcb1239fde0b1f4ed38e0d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30c53ae078b112f7186e910c38898233
d3c58c28f0734f98bed64a26ede077464c3ad3f2
8f7dd1cf9f1472468a7caaf67a8f9c15bfe8836badcfb3249a9a8a7a6c3c0533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4c877ef-76ec-4130-a623-3cfe6579a770.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13787
x-amzn-requestid: 2598b4fe-a032-47d7-8e6c-cfdcfbe9d64a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eZDvYE35IAMF1Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b9e662-574eb7370aac63dd531d6b75;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 21:38:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cd50TSdgJPa-oMD9VpvWgVF9DMls8TmQqVUNNj5d6BPlVnN1_3vTUA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 22:05:52 GMT
age: 21538
etag: "d3c58c28f0734f98bed64a26ede077464c3ad3f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5941f04b-d952-4fae-85f3-c1bff0c5cdf4.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5941f04b-d952-4fae-85f3-c1bff0c5cdf4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 50dd2e696e0a1a48dbcd4d1b8bc907e7
e2e91a662b66969e9f848927911128abf06121d2
ccef677139534fdf8de161c8dc8f4bd48f92546bfa0f3ae23d1457e381d5b3b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5941f04b-d952-4fae-85f3-c1bff0c5cdf4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5399
x-amzn-requestid: 8a055705-ca07-4b8d-8767-210322697e27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eMnz9FQkIAMFUBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4ece5-292906a73d727ee2454e6a11;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 03:05:09 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qptEd5Uous6Odk7-DtcJZvX2x5xQCTtCgJhwUgxBfbcPZuOUskhKsQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 05:53:31 GMT
age: 79879
etag: "e2e91a662b66969e9f848927911128abf06121d2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
65.9.44.95
23.33.119.27
93.184.220.29