realtimewin.com/sg/raffle_boxes_bk_ntx/
301 Moved Permanently 178 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/ HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:52 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8286265a56e3e10efd41b41618a54071
5f10ac9a050e15f5598674dc7ee3865b325d01a8
2da2fa0b2b86ccc4029d0baa4e9c5b21a6433228b84b451b72b1d318561d4ef2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DA2FA0B2B86CCC4029D0BAA4E9C5B21A6433228B84B451B72B1D318561D4EF2"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8590
Expires: Sun, 06 Nov 2022 13:37:03 GMT
Date: Sun, 06 Nov 2022 11:13:53 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 72c64df35304c35cd95e4ed6e101e795
a39287987854d644a8da295da536fb31de8b44c1
a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6527
Cache-Control: max-age=86758
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:53 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 11:19:51 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3527f898221f8ba6b5015f6decc100
ead93baa0e9d3a6297be3377dc3a624e5a3f509a
73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73A068F907CC50DD60AF18D545B4264DD44BC4B9F40BF9ADFCEEA157FDC33099"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2247
Expires: Sun, 06 Nov 2022 11:51:20 GMT
Date: Sun, 06 Nov 2022 11:13:53 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: uiFekk3PYMVc7E9twvhbbXsjL+qJVdfjcxRxDaWPg4xTGadFcu8nvGgDWdDp40wODPZJmjCzAms=
x-amz-request-id: EG6GXAWNYQC2KRG7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 06 Nov 2022 10:47:36 GMT
age: 1577
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 87047079c626126e3b3dbc04df927649
66d83f76d7b55f0f8212e7357bc85bb1332f974c
11286947770cc3a15a24a7bf841b700daaa811d88b2e8035ec0fe48ad735ffbb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11286947770CC3A15A24A7BF841B700DAAA811D88B2E8035EC0FE48AD735FFBB"
Last-Modified: Sat, 05 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2653
Expires: Sun, 06 Nov 2022 11:58:06 GMT
Date: Sun, 06 Nov 2022 11:13:53 GMT
Connection: keep-alive
realtimewin.com/sg/raffle_boxes_bk_ntx/
200 OK 3.8 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source, ASCII text
Hash be9fa8cc59d06e3c80c5cdb0fb75159d
0d60d831ccc09cd976c21841db339b1f61f5dbca
12930faaed89edfe7a67b80cc23b262c466e194b2a783f16b4f42253a13235b9
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/ HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: text/html
Last-Modified: Tue, 25 Oct 2022 11:50:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6357cd73-46b8"
Content-Encoding: gzip
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:53 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
realtimewin.com/sg/raffle_boxes_bk_ntx/css/6h0fj0l122.css
200 OK 7.8 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/6h0fj0l122.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (7771), with no line terminators
Hash 6e3fd6255cd4b78c2da62e84c1ed7a7f
68ac4757dc2ed808fd29fc628c61ef9ce41039ee
5323e16100f8ee32d11bc2d842895a35f32429f890c9ed5f0bf48d2261b73873
GET /sg/raffle_boxes_bk_ntx/css/6h0fj0l122.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: text/css
Content-Length: 7771
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-1e5b"
Accept-Ranges: bytes
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 11:13:53 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1667733233.dop021.sk1.t,1667733233.cds201.sk1.hn,1667733233.cds210.sk1.c
X-Firefox-Spdy: h2
realtimewin.com/sg/raffle_boxes_bk_ntx/js/helpers.js
200 OK 2.2 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/helpers.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 328bc403d211866b7fbeeb5a3d48057e
77326f838722cbf346cc7a657ab7a69e391657e8
290969069b2a56f48ae9975daa49685e52f2d44a3977c4d6f2efccf3eceb04ec
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/helpers.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: application/javascript
Content-Length: 2224
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-8b0"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/css/4pbny7k30a.css
200 OK 1.4 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/4pbny7k30a.css
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 6c9276f3d527ee8da644994a6ce48cca
eb107297ac31f1410aa5ba830d8035ccd2ffa837
c714c752c8a7825f5993e5507190117ccf63ade68d44d455efcdd81c85ac7d48
GET /sg/raffle_boxes_bk_ntx/css/4pbny7k30a.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: text/css
Content-Length: 1397
Last-Modified: Tue, 25 Oct 2022 11:50:11 GMT
Connection: keep-alive
ETag: "6357cd73-575"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/visual.js
200 OK 7.3 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/visual.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (564)
Hash e8b75b31218a58574864ba2e377e044b
d6a0668521c72106c46ea0a67483ca57f59bfc7b
d5a419e8a0d4db2912a9a0df5a9a52f06a947775a1ce50e047056f513da96dc0
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/visual.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: application/javascript
Content-Length: 7313
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-1c91"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 279 B IP
Hash 7bb75cda180838bb141d84bc6237047c
3bfc21e05d99392259a744b8b6246c4e87c121f4
97b56f9370203a7d906a51562dc75f23414138e8d82423410bce14ac5c1fcca2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4773
Cache-Control: max-age=158814
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:53 GMT
Etag: "63674daa-117"
Expires: Tue, 08 Nov 2022 07:20:47 GMT
Last-Modified: Sun, 06 Nov 2022 06:01:14 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
realtimewin.com/sg/raffle_boxes_bk_ntx/js/config.js
200 OK 1.3 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/config.js
IP
ASN #14061 DIGITALOCEAN-ASN
Hash a2c2f37e9858846864a243799c367d50
c3516e0a8a4691dc981ee35db1772e28d41236a2
3f0a01153acb4d045828d89685bfecc3142c8cb615f641e733a5ca56fd6c73ce
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/config.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: application/javascript
Content-Length: 1345
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-541"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/general.js
200 OK 4.7 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/general.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (438)
Hash 543951b88566cc693fd4be7683d0ab7f
8374246b02b8d49c113a3bb33999371900bfc608
ba75e1b970da91a73273e6659468fc8fc89cd1e1c8fbff5ba9d7c012344506b0
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/general.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: application/javascript
Content-Length: 4735
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-127f"
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 279 B IP
Hash 7bb75cda180838bb141d84bc6237047c
3bfc21e05d99392259a744b8b6246c4e87c121f4
97b56f9370203a7d906a51562dc75f23414138e8d82423410bce14ac5c1fcca2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4773
Cache-Control: max-age=158814
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:53 GMT
Etag: "63674daa-117"
Expires: Tue, 08 Nov 2022 07:20:47 GMT
Last-Modified: Sun, 06 Nov 2022 06:01:14 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
realtimewin.com/sg/raffle_boxes_bk_ntx/css/7j3yarnp5h.css
200 OK 395 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/7j3yarnp5h.css
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 3f9401a877cb75e550c646959ecd1343
038fbca8d375d51e01c312f19d18c34b93e17762
fdbeabb5b3aa977fa4416df3852acbf9fadf5755172a059961dc1ba72bb1d345
GET /sg/raffle_boxes_bk_ntx/css/7j3yarnp5h.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: text/css
Content-Length: 395
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-18b"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/questions.js
200 OK 5.3 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/questions.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (395)
Hash 9c7f08f0923a57726409d033a9e49469
96b2d3678db2afd0622c069be676732074dadff8
b1a3eace772da9b2cc78947c1d209e4780f6bdd53431afae6ff178cff0c14d6e
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/questions.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: application/javascript
Content-Length: 5251
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-1483"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/js/flow.js
200 OK 13 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/js/flow.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (1562)
Hash 39896c37ecf351b558e3f5f81ff09455
dd269fc8ac86a68496175ff7ce9948f5096b6a39
32956e236351d3d4cfc542eac19cff5f07ba68117ffcee4e1e9b60a8ce531e9d
Analyzer Verdict Alert fortinet Phishing
GET /sg/raffle_boxes_bk_ntx/js/flow.js HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: application/javascript
Content-Length: 13099
Last-Modified: Tue, 25 Oct 2022 11:50:19 GMT
Connection: keep-alive
ETag: "6357cd7b-332b"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/css/76xzrsbt8n.css
200 OK 3.8 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/76xzrsbt8n.css
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 56591d9cbca8de25b9e8ed95b60d4f61
a3c74f31ce5fe4f0dc50dce291ae00ac3c14a0ff
967c2a487286ccb51d63128dfa97caae1b5dcfe39a22be90702285aed0f906c8
GET /sg/raffle_boxes_bk_ntx/css/76xzrsbt8n.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: text/css
Content-Length: 3757
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-ead"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ebbd65a2bdd5c6f3dea5a6b99b25f0d
484be27b25b736a7e7e2b1d5ef9760aecdcec01b
5616e6c097b0b7680eeee193b58950faa38c9792e8793c16c315e2554a34cdd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
realtimewin.com/sg/raffle_boxes_bk_ntx/css/caixes.css
200 OK 63 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/caixes.css
IP
ASN #14061 DIGITALOCEAN-ASN
Hash 69870e317698e087a6244cd2b01500ee
7094538022349e444aa0219f97d973e602db5696
980ce3f8d7eeeacb8009f84c0e8f29949a3ff024418a599c1233927e29ffee91
GET /sg/raffle_boxes_bk_ntx/css/caixes.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: text/css
Content-Length: 63
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-3f"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13e65ad7f6f12300b12d6cd6936d621
575faf606b5c5e39e0fbbef59998bcd3625aa141
10787f99c02b63d52b9b74fcec9497108d67c56c4a9436e0e3c9a7129d727dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 7bb75cda180838bb141d84bc6237047c
3bfc21e05d99392259a744b8b6246c4e87c121f4
97b56f9370203a7d906a51562dc75f23414138e8d82423410bce14ac5c1fcca2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4773
Cache-Control: max-age=158814
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:53 GMT
Etag: "63674daa-117"
Expires: Tue, 08 Nov 2022 07:20:47 GMT
Last-Modified: Sun, 06 Nov 2022 06:01:14 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
www.googletagmanager.com/gtag/js?id=G-4530RD5FPC
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-4530RD5FPC
IP
File type ASCII text, with very long lines (21373)
Hash 67b3985893ac7d11ff2fbd4af9acbc62
3a69a3bda5f56bf2c70828ca726dc0e7b366d285
91b561dc8c4762d1c4f98683e23772e4fe13cf6e9375722ad808075fd39256cd
GET /gtag/js?id=G-4530RD5FPC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Nov 2022 11:13:53 GMT
expires: Sun, 06 Nov 2022 11:13:53 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76551
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
realtimewin.com/sg/raffle_boxes_bk_ntx/css/font-awesome.css
200 OK 122 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/css/font-awesome.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (659)
Size 122 kB (122128 bytes)
Hash a8dd6f550f891acde535b28c1d3fe75f
131430af33a8079c2934875095760a7b2ae71835
6a54d489577cec60935437ee317cd09b989ccafde66f2e9e4d645c64f5f5ba28
GET /sg/raffle_boxes_bk_ntx/css/font-awesome.css HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: text/css
Content-Length: 122128
Last-Modified: Tue, 25 Oct 2022 11:50:12 GMT
Connection: keep-alive
ETag: "6357cd74-1dd10"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13e65ad7f6f12300b12d6cd6936d621
575faf606b5c5e39e0fbbef59998bcd3625aa141
10787f99c02b63d52b9b74fcec9497108d67c56c4a9436e0e3c9a7129d727dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
realtimewin.com/sg/raffle_boxes_bk_ntx/img/country_flag.png
200 OK 3.6 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img/country_flag.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data
Hash 1be1df62376de14083746ad5b418e272
494d9d47c076c4caab75d2d0306b1b5fd33a29d9
cf5ceeca50ae2cd1946b1305c62691e2ecdd69641d865ec70bc1c6e88a0602ba
GET /sg/raffle_boxes_bk_ntx/img/country_flag.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: image/png
Content-Length: 3598
Last-Modified: Tue, 25 Oct 2022 11:50:15 GMT
Connection: keep-alive
ETag: "6357cd77-e0e"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/img/card_brand.png
200 OK 48 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img/card_brand.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 481 x 353, 8-bit/color RGBA, non-interlaced\012- data
Hash beea815021316526e77831c36326c18c
a4c8c214045abfc940f45b62580b2c458f0758b5
208a9b33bfc1dd3f7d2ba9e1d340057d6f1518685bc282cd42f1d66909b48224
GET /sg/raffle_boxes_bk_ntx/img/card_brand.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: image/png
Content-Length: 47926
Last-Modified: Tue, 25 Oct 2022 11:50:13 GMT
Connection: keep-alive
ETag: "6357cd75-bb36"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5c2d82b33e6910bf1b2d7d15f1c30cf3
fdad5ae7852d635f15440033b08e84c947323def
c77b78b04381621fe0fa57a9f6af10565aacedf71d94eb62a320b8ac466b862f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C77B78B04381621FE0FA57A9F6AF10565AACEDF71D94EB62A320B8AC466B862F"
Last-Modified: Fri, 04 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9283
Expires: Sun, 06 Nov 2022 13:48:36 GMT
Date: Sun, 06 Nov 2022 11:13:53 GMT
Connection: keep-alive
kit.fontawesome.com/7deea0368b.js
200 OK 4.3 kB URL HTTP/2 kit.fontawesome.com/7deea0368b.js
IP
Hash 8e5213e10f631825c06f2b1dd19ea51b
7668225ac31b890c144f9548ea4b2589b69788d3
716936c97a81dee801f316c4594842db3368b2867669cfbdec2bd8c0cae597b2
GET /7deea0368b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 11:13:53 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyRvti42bW38wcAgdYsi
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 765d67059b8db515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 3f75eb5812f7d078d942a7b42aabb1a8
9aa85b77f2a7f8007bd2325d0eac6efd040f2200
ad8e9b96f0614d60b78687bb68cbdfa9e86c19256743214dfb58e6a08b98169f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5958
Cache-Control: max-age=99161
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:53 GMT
Etag: "63666004-117"
Expires: Mon, 07 Nov 2022 14:46:34 GMT
Last-Modified: Sat, 05 Nov 2022 13:07:16 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
200 OK 887 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
IP
Hash 922ef9889c515af22a396be61ee45fe6
49a15aa414c945c14b4da9c71c4b8f9f912480b9
85c629ebe4f7ddf6213d9f4eb4aed959c3b14d21ee94ef06a154afe530bab28b
GET /css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 06 Nov 2022 11:13:53 GMT
date: Sun, 06 Nov 2022 11:13:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
realtimewin.com/sg/raffle_boxes_bk_ntx/img/background.jpg
200 OK 46 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img/background.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x700, components 3\012- data
Hash b6899a4cdf7be73d8ceb0ba6d48e7035
0f452ffdf4f331e789da5106dd3d487e01037b41
9373d24fad9b2e0f667c51ac314ec586ff419932f2894a709ba0261f9316f6b6
GET /sg/raffle_boxes_bk_ntx/img/background.jpg HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/css/caixes.css
Cookie: _ga_4530RD5FPC=GS1.1.1667733231.1.0.1667733231.0.0.0; _ga=GA1.1.1042742686.1667733232
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: image/jpeg
Content-Length: 46309
Last-Modified: Tue, 25 Oct 2022 11:50:13 GMT
Connection: keep-alive
ETag: "6357cd75-b4e5"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/interior.png
200 OK 768 B URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/interior.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit colormap, non-interlaced\012- data
Hash af77ae24aaa7aa332958f33f2e254ccc
3bf2a3b03733868dd64288b2d682f617f26d3321
4b1fcfe5b92441547d54a9eae2635fe66a33ca178f0da9d06e4a2daac5d74c89
GET /sg/raffle_boxes_bk_ntx/img_caixa/interior.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Cookie: _ga_4530RD5FPC=GS1.1.1667733231.1.0.1667733231.0.0.0; _ga=GA1.1.1042742686.1667733232
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: image/png
Content-Length: 768
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-300"
Accept-Ranges: bytes
stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
200 OK 32 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65297)
Hash ed86ac6235cc9fd3d38942975c3f0aed
a070c8e10890d5256d371fa59ef7c3e5412ea5f2
456e1e5652e0036ace52de39901cf1cfacf1448e022ebf27dc88d668c0a97479
GET /bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 11:13:53 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7fd2f04e75bd7ab1a79d80cdd4c33085"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 08/20/2022 02:45:35
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 874
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 3d2cbceb820d58ccc203660f2b0db8c4
cdn-cache: HIT
cf-cache-status: HIT
age: 120517
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 765d6705fb2fb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/conteudo.png
200 OK 9.6 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/conteudo.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash ed01b29debaf65c87d4192dbac6a9674
b37b0ddcbb4d58b00c3128051c8a1636135c9c93
bd56b398c48d4aadb8f4df70e8e3d091e05831e6229f34163d40542b340a13d5
GET /sg/raffle_boxes_bk_ntx/img_caixa/conteudo.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Cookie: _ga_4530RD5FPC=GS1.1.1667733231.1.0.1667733231.0.0.0; _ga=GA1.1.1042742686.1667733232
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: image/png
Content-Length: 9633
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-25a1"
Accept-Ranges: bytes
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/frente.png
200 OK 4.4 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/frente.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash 57d0bad7abeaf9db189630eccfe040b6
2d2d12e59be43514915c535052a00a8b297c3f2c
eb53c312d70309e36e97ab3223904a90808d9636f5a0a93d651fb763a9e75f9a
GET /sg/raffle_boxes_bk_ntx/img_caixa/frente.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Cookie: _ga_4530RD5FPC=GS1.1.1667733231.1.0.1667733231.0.0.0; _ga=GA1.1.1042742686.1667733232
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:53 GMT
Content-Type: image/png
Content-Length: 4400
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-1130"
Accept-Ranges: bytes
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
200 OK 4.5 kB URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
IP
File type ASCII text, with very long lines (26500)
Hash e27340b75cb8038ba81496f20819efea
965392813635202cd8de1df3c32af7060af9aed6
677d2907a899311775bc5193be51aeedad7bd8b8556a1c716b4290247ff29522
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 11:13:54 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 965419e53972184f1266c4d4299747c4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: ZHnlPF3J2MremyFPwr6TTzLS1Dzz_86TFKCv9OSseKl0FXD1bEV_gA==
age: 2676660
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q0vdNpAbuWPwAdBhUvPZiD%2Bv%2FWLO4NmJf0nlNguALPIFq9QWkKYIMVeSgmN%2F%2BY94vJ515lMeXe45ehPzLA0b2hYhO0CC7QRUFQ4iuBREBHwmR0IGKo65SaLqjNFa%2F4qzhlignFGhlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 765d67089bb2d180-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
200 OK 1.1 kB URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
IP
File type ASCII text, with very long lines (2774)
Hash 6e8e32bc30bb9f7b3f50c5384748eb62
2e05bd96dd58a2d51d11b27cad40891e0de9af16
307edfbd150c25b5c4d98d27dc23ba7af8cddb4f4f3c6e2d42bb8bbb4664352e
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 11:13:54 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8d36edc1ce736c158ddedbd7365e2a8e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: t8ar8hKnh0XDMGvez4E7m-L4GBD3Y9U6Z-cArMiPmnW7HqzdXWq4Mw==
age: 2106557
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zVpez2WAfYlUXsgxw9tYuqFlaZKyXBjp9AJSIWAwfYD3oCSps57KQQu6mXbuVSof%2Bc9qWUvZcO1kt2b8JJMrVkRLLFqxD24ZIrpmXn7RyuT%2FoLquvCjZJseZz3Z%2Bm45HAH56v9eHGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 765d67087b83d180-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d862f992e9902530594e7aca425f129b
25b414fe833d30b52928535d659a1ee281b82e3a
0c6286152fe8bb5fdf1505f2001d530a65ee53aa6d9601bbb1eecb683036071d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2670
Cache-Control: max-age=167847
Content-Type: application/ocsp-response
Date: Sun, 06 Nov 2022 11:13:54 GMT
Etag: "6367792b-1d7"
Expires: Tue, 08 Nov 2022 09:51:21 GMT
Last-Modified: Sun, 06 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
200 OK 25 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65324)
Hash 21ac51bc8eac7802f5792eb7a730f747
c73e4a8c40527d7b7b44ba1e13b74f7fed2a6f76
fc33af787c4e1dd39e5bd5b12c02ff00035de3cba460681d070503b7c703f38c
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 11:13:53 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 08/20/2022 02:33:27
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 7d48353332d559f1c9dbf304c4ca2d60
cdn-cache: HIT
cf-cache-status: HIT
age: 120517
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 765d67060b3ab505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
notix.io/event
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:51 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
notix.io/event
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:51 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
notix.io/event
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:51 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
notix.io/event
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 85
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:50 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 63
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:50 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1191
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:50 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
notix.io/event
200 OK 15 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 28ec1eee5f4049e3c4f2135069c1d2c8
3505519507ca1c2a089c46e100b80408ca278421
edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b
POST /event HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 76
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:50 GMT
content-type: application/json; charset=utf-8
content-length: 15
access-control-allow-origin: https://realtimewin.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jlLQ6UvTwkK36tQ/8d5uWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1z0tDZzxJr1nCGw5kH+2NcZNQsk=
region1.google-analytics.com/g/collect?v=2&tid=G-4530RD5FPC>m=2oeb20&_p=1157214224&cid=1042742686.1667733232&ul=en-us&sr=1280x1024&_s=1&sid=1667733231&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fsg%2Fraffle_boxes_bk_ntx%2F&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-4530RD5FPC>m=2oeb20&_p=1157214224&cid=1042742686.1667733232&ul=en-us&sr=1280x1024&_s=1&sid=1667733231&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fsg%2Fraffle_boxes_bk_ntx%2F&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-4530RD5FPC>m=2oeb20&_p=1157214224&cid=1042742686.1667733232&ul=en-us&sr=1280x1024&_s=1&sid=1667733231&sct=1&seg=0&dl=https%3A%2F%2Frealtimewin.com%2Fsg%2Fraffle_boxes_bk_ntx%2F&dt=Prize%20Alert!&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://realtimewin.com
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://realtimewin.com
date: Sun, 06 Nov 2022 11:13:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/caixa.png
200 OK 9.7 kB URL HTTP/1.1 realtimewin.com/sg/raffle_boxes_bk_ntx/img_caixa/caixa.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 258 x 185, 8-bit/color RGBA, non-interlaced\012- data
Hash a76821e94d179b634c5bd130dd74d9d2
4773b169be6d89451e13679356bae81401a38c97
69f4a59b04322e88260da4eaa5cf079fbabef9539b3fb923c373f21b7f36f125
GET /sg/raffle_boxes_bk_ntx/img_caixa/caixa.png HTTP/1.1
Host: realtimewin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/sg/raffle_boxes_bk_ntx/
Cookie: _ga_4530RD5FPC=GS1.1.1667733231.1.0.1667733231.0.0.0; _ga=GA1.1.1042742686.1667733232
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Nov 2022 11:13:55 GMT
Content-Type: image/png
Content-Length: 9667
Last-Modified: Tue, 25 Oct 2022 11:50:17 GMT
Connection: keep-alive
ETag: "6357cd79-25c3"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10777
Expires: Sun, 06 Nov 2022 14:13:32 GMT
Date: Sun, 06 Nov 2022 11:13:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10777
Expires: Sun, 06 Nov 2022 14:13:32 GMT
Date: Sun, 06 Nov 2022 11:13:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10777
Expires: Sun, 06 Nov 2022 14:13:32 GMT
Date: Sun, 06 Nov 2022 11:13:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10777
Expires: Sun, 06 Nov 2022 14:13:32 GMT
Date: Sun, 06 Nov 2022 11:13:55 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bF_38GKXoAMFwSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cLOqm36ioY751X1yA1WcQpaXiFYuvzFn8xLQ56MyDTpvi1J4Ruvc9Q==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 06:27:59 GMT
age: 17156
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b370c4e3b01be9fbbc3e310e6958cd55
cc22e90a0b476215f2fd864d84c9b00dded100a6
f54d90c5854b6f140b63dad3aa92bd858b8f360b8c77d50fdf344e813e9385c5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78f88d98-b52b-4ad1-8cfc-e60fd17b46e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11535
x-amzn-requestid: 0a1d9895-e2e3-4070-921a-736d8c6f254e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJatPGwjoAMFx8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7ee-101a7f3a2b834d0b411c9de0;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: j0I2JcPIptLTJZlwg8QG7kkTE1eCvZiBDzi6j2YYqNwvawJ6k2CqHQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:48:50 GMT
age: 48305
etag: "cc22e90a0b476215f2fd864d84c9b00dded100a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8df47f1e-c13a-452f-b0e2-28c141dbb191.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8df47f1e-c13a-452f-b0e2-28c141dbb191.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b18a8c9f5539ce33476f843f5811e01d
11d1f2ce72d2aa6686c79f777cd0bdb4ddeb681b
fc20e507eedccb52078979f2132434b11b9d50d917cab512d8e0c99515b1236c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8df47f1e-c13a-452f-b0e2-28c141dbb191.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7573
x-amzn-requestid: d56e7b27-f2cb-4cd3-9f67-ba18d1bfe270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bDkhGHmjoAMFxxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364813a-3a1c18b13c41f38673890b00;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 03:04:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: c-u9tBFoIve3sEwtbUvIFZoPu6eudy3ZFQi8j2m9mTPNEarihTvddw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 05:31:43 GMT
age: 20532
etag: "11d1f2ce72d2aa6686c79f777cd0bdb4ddeb681b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39ac4f41f6bbdba85b2afeb7b011db5f
8e7a2be19b5c7682e86aec81907f6026d14d7313
fbd813af4eb335e1aefa6fb78b672bf89f8606ef688c98d3bd38ffdb77abfba3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8160
x-amzn-requestid: 31cf0571-0ef2-4c99-a6be-afd806b7f449
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJaroFHhoAMF26g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-269b7bcc1bcb8bdc4aa51dc9;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:43 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: J2pyEM7n1b_j4vS7S_K8aiJ-Jj01PtPk7Qb7rEOblKaz-isZtSqo1g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:33 GMT
age: 48562
etag: "8e7a2be19b5c7682e86aec81907f6026d14d7313"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4dd82c6-5260-42a1-b9dd-3fadf975bc74.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4dd82c6-5260-42a1-b9dd-3fadf975bc74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 551796a02f4aaaa3665290e79bf3ce07
6bf2e0fabc3fa8140c81b72424dcf9d31180bf6b
43f8a845006da27ad3aaa6f898ed2f6de13ee3819f548f939c110e9f900c52ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4dd82c6-5260-42a1-b9dd-3fadf975bc74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7950
x-amzn-requestid: 706197c6-9e07-439f-8043-a44dc764cd77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabbEsaIAMFQgg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-22c4d5632b6a8d013c858293;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UTajFS74mA4CEbGfHX7yyvx6_FpuFezaDwBrVA7MBSygLmoPrZcKrQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:49:01 GMT
age: 48294
etag: "6bf2e0fabc3fa8140c81b72424dcf9d31180bf6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcc79e66d1e21452efb26d26650f6739
1f727a7ea032082658944cf4041686446fb6b5f2
af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 3a50374d-d90e-452e-bb89-82ca14c94b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJarpGtqIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-55c356475fb64e6625a338c7;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ry_OKFFZDdDoVya2hTxnFlDGtgoSw0JRqieDnCO4mSNFbgV-AuLE5Q==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:33 GMT
age: 48562
etag: "1f727a7ea032082658944cf4041686446fb6b5f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
IP
GET /releases/v5.15.4/css/free.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://realtimewin.com/
Origin: https://realtimewin.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 06 Nov 2022 11:13:54 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 20e9ac2e933b363bb35ea6c61802dc9a.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR3-C1
x-amz-cf-id: GmpWUMkx1_JHSTinRZFvoFKe7WbGD0motNHWCkiYnZNrMUirufhrsg==
age: 2167885
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nlzUN8kJaJ9kNNM8WH0L%2ByHb6%2FHzOsHJ3fGTOu8qkAif0PgbvxGV3rapeYSKv9SybUUdv3%2FvkzHav69DsIplgqOxg5R7XvZQX38gL3IfjOmyR%2FeVDY0utIjTg0U1LYIeteQgECvhPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 765d67087b7fd180-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
notix.io/ent/current/enot.min.js
200 OK 0 B URL HTTP/2 notix.io/ent/current/enot.min.js
IP
GET /ent/current/enot.min.js HTTP/1.1
Host: notix.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://realtimewin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 06 Nov 2022 11:13:49 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 07:54:14 GMT
etag: W/"6360d0a6-12109"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
46.101.99.16
93.184.220.29
216.239.32.36
104.18.10.207
23.36.76.226