urlquery - report: offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-28 05:46:10 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	34.208.31.97
tracker.essayzon.com (1)	0	2020-11-29 22:12:07 UTC	2020-11-29 22:12:07 UTC	3.70.16.242	Unknown ranking
offer.essayzon.com (10)	0	2020-05-07 21:54:38 UTC	2022-11-28 07:05:26 UTC	50.116.114.86	Unknown ranking
r3.o.lencr.org (7)	344	No data	No data	23.36.76.226
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-28 05:55:58 UTC	34.102.187.140

Scan Date	Severity	Indicator	Comment
2022-11-28	2	offer.essayzon.com/1/myprize/boxwin/index_files/c1ffd89caad1a6f1ac64e76a76c (...)	Phishing
2022-11-28	2	offer.essayzon.com/1/myprize/boxwin/index_files/62becd726872236d701af5d76cf (...)	Phishing
2022-11-28	2	offer.essayzon.com/1/myprize/boxwin/index_files/micro.js	Phishing
2022-11-28	2	offer.essayzon.com/1/myprize/boxwin/scblogo.svg	Phishing
2022-11-28	2	tracker.essayzon.com/click	Phishing

Date	UQ / IDS / BL	URL	IP
2022-12-05 17:55:11 +0000	0 - 0 - 1	offer.essayzon.com/1/myprize/boxwin/thto.php	50.116.114.86
2022-12-05 06:56:29 +0000	0 - 0 - 1	offer.essayzon.com/1/myprize/boxwin/winnerbox.php	50.116.114.86
2022-12-05 00:14:27 +0000	0 - 0 - 1	offer.essayzon.com/1/claimmoney/tht.php	50.116.114.86
2022-12-04 10:52:46 +0000	0 - 0 - 6	offer.essayzon.com/1/myprize/fr/fren.php?p1=2 (...)	50.116.114.86
2022-12-03 22:55:15 +0000	0 - 0 - 1	offer.essayzon.com/1/myprize/boxwin/thto.php	50.116.114.86

Date	UQ / IDS / BL	URL	IP
2023-02-08 19:41:47 +0000	0 - 3 - 0	cbvcxcxzx.tk/Invoice3657/	192.185.147.115
2023-02-08 19:40:23 +0000	2 - 5 - 0	servpage-amz225.duckdns.org/59519aaf1436405de (...)	162.241.115.35
2023-02-08 19:37:53 +0000	0 - 0 - 54	jumbilin.com/	192.254.184.64
2023-02-08 19:25:11 +0000	0 - 0 - 15	cascaveldiesel.com.br/login.php?online_id=109 (...)	192.185.215.253
2023-02-08 19:22:27 +0000	0 - 6 - 0	www.labmolvet.com.br/	108.167.132.213

Date	UQ / IDS / BL	URL	IP
2023-02-08 10:55:15 +0000	0 - 0 - 1	offer.essayzon.com/1/myprize/boxwin/winnerboxp.php	162.246.59.148
2023-02-07 05:15:47 +0000	0 - 0 - 1	offer.essayzon.com/1/claimmoney/indexmzab.php	162.246.59.148
2023-02-06 18:56:13 +0000	0 - 0 - 5	offer.essayzon.com/1/myprize/boxwin/winnerbox (...)	162.246.59.148
2023-02-06 06:55:01 +0000	0 - 0 - 1	offer.essayzon.com/1/myprize/boxwin/winnerboxp.php	162.246.59.148
2023-02-05 09:54:48 +0000	0 - 0 - 5	offer.essayzon.com/1/myprize/boxwin/winnerbox (...)	162.246.59.148

Date	UQ / IDS / BL	URL	IP
2022-12-05 00:14:16 +0000	0 - 0 - 6	tracker.essayzon.com/go/9b2c7d58-7e2d-49c9-94 (...)	3.70.16.242
2022-12-01 23:55:40 +0000	0 - 0 - 5	offer.essayzon.com/1/myprize/boxwin/thto.php? (...)	50.116.114.86
2022-11-27 18:59:48 +0000	0 - 0 - 7	tracker.essayzon.com/go/9b2c7d58-7e2d-49c9-94 (...)	3.70.16.242
2022-11-23 13:59:11 +0000	0 - 0 - 6	tracker.essayzon.com/go/9b2c7d58-7e2d-49c9-94 (...)	3.70.16.242

Request	Response
GET /1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW (...) FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: f12333816ac6a8c3975caaaad2ad15fc2d7be062dc7ce6449f7ef5f60ea3b1f9 50.116.114.86 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Mon, 28 Nov 2022 07:58:10 GMT Server: nginx/1.21.6 Vary: Accept-Encoding Content-Encoding: gzip Accept-Ranges: none X-Server-Cache: true X-Proxy-Cache: MISS Content-Length: 4453 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1261) Size: 4453 Md5: 4677ea970888b18bb47c4b7a0e3247f6 Sha1: 0dfa445581b3daeac90d4e27797e8eacc122bd41 Sha256: f12333816ac6a8c3975caaaad2ad15fc2d7be062dc7ce6449f7ef5f60ea3b1f9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15862 Expires: Mon, 28 Nov 2022 12:22:32 GMT Date: Mon, 28 Nov 2022 07:58:10 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cdbad2434b7d127a4fc769807a9dc3e7 Sha1: fa98cd9fc2309ab4423f33f683d17bdb17d76713 Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6375 Cache-Control: max-age=101958 Date: Mon, 28 Nov 2022 07:58:10 GMT Etag: "63833c71-1d7" Expires: Tue, 29 Nov 2022 12:17:28 GMT Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT Server: ECS (ska/F71B) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 64b2a23eab6e5ae8c010ec7242be930c Sha1: 0673e4385ba01a5a245711bab96cafc34f765793 Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 28 Nov 2022 07:19:32 GMT cache-control: public,max-age=3600 age: 2318 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 567df7db606cf5d0871aa5bc9311b6da Sha1: 4263faac7cbab2fcaf6661911dcad5091c06be17 Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786" Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3258 Expires: Mon, 28 Nov 2022 08:52:28 GMT Date: Mon, 28 Nov 2022 07:58:10 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 71f9c681a82440fd55e76c780a20e55d Sha1: 3147768cfbcdd06e0c6e69684292e68e99917a80 Sha256: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 28 Nov 2022 07:58:10 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: SNDV/U0wHBaw1FsSL1VbVSBhX+ZIVRE7XI/tchBd7amXGb3PlCCKYa2GWEQ96sSVokBoLVPNFA0= x-amz-request-id: PGA2HRR63VNZQRRT content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 28 Nov 2022 07:44:57 GMT age: 793 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /1/myprize/boxwin/index_files/c1ffd89caad1a6f1ac64e76a76c000bc.js HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com	URL: offer.essayzon.com/1/myprize/boxwin/index_files/c1ffd89 (...) FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: 1d2a26f8aaf3ff0298a942711bf9b01dc2aef45e955031ec7935ca76549afc83 50.116.114.86 HTTP/1.1 200 OK Content-Type: application/javascript Date: Mon, 28 Nov 2022 07:58:10 GMT Server: Apache Last-Modified: Sun, 13 Feb 2022 14:01:51 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Transfer-Encoding: chunked --- Additional Info --- Magic: ASCII text, with very long lines (65451) Size: 38667 Md5: efac5ec08a294b9719fa79a8452f93a2 Sha1: 58475b2c269b29313c16c3ee9a9e8a9bc6e80097 Sha256: 1d2a26f8aaf3ff0298a942711bf9b01dc2aef45e955031ec7935ca76549afc83 Alerts: Blocklists: - fortinet: Phishing
GET /1/myprize/boxwin/index_files/mycss.css HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com	URL: offer.essayzon.com/1/myprize/boxwin/index_files/mycss.css FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: 4889e31fb753ac70602d504cbde20fc8857e0bb576c424e0105bb7880895aafe 50.116.114.86 HTTP/1.1 200 OK Content-Type: text/css Date: Mon, 28 Nov 2022 07:58:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Tue, 24 May 2022 08:19:50 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 7705 --- Additional Info --- Magic: ASCII text, with very long lines (62302) Size: 7705 Md5: 3e053ea10095d66cc50c79509d4c1ed6 Sha1: 59150250db8d8260302623d780e55e1a2fa3c04f Sha256: 4889e31fb753ac70602d504cbde20fc8857e0bb576c424e0105bb7880895aafe
GET /1/myprize/boxwin/index_files/froala_style.css HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com	URL: offer.essayzon.com/1/myprize/boxwin/index_files/froala_ (...) FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: 3b2bb1dba6c4c7e7b0ba844a779facd9d6d628bc02c02b425a70d928390732de 50.116.114.86 HTTP/1.1 200 OK Content-Type: text/css Date: Mon, 28 Nov 2022 07:58:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Sun, 13 Feb 2022 14:01:51 GMT Accept-Ranges: none Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1971 --- Additional Info --- Magic: ASCII text, with very long lines (7048) Size: 1971 Md5: d22a849892d969167a4cee390b475fb9 Sha1: 91a63ba37343d9f6d92d55ca1ccb1d6df28b95da Sha256: 3b2bb1dba6c4c7e7b0ba844a779facd9d6d628bc02c02b425a70d928390732de
GET /1/myprize/boxwin/index_files/62becd726872236d701af5d76cf57542.js HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com	URL: offer.essayzon.com/1/myprize/boxwin/index_files/62becd7 (...) FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: d1344a76023d5cd1d21b927f282371cec7ee4baba6ddc72c7a25af0cb25a4b64 50.116.114.86 HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Date: Mon, 28 Nov 2022 07:58:10 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://offer.essayzon.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip Transfer-Encoding: chunked --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2562) Size: 18982 Md5: a0b7b151bf5459fb06310d9cd710cfab Sha1: 7a7c931404e0beaf6d8eb34a15b575eccdca4abb Sha256: d1344a76023d5cd1d21b927f282371cec7ee4baba6ddc72c7a25af0cb25a4b64 Alerts: Blocklists: - fortinet: Phishing
GET /1/myprize/boxwin/index_files/micro.js HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com	URL: offer.essayzon.com/1/myprize/boxwin/index_files/micro.js FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: ea1c9cd7723dc8709beaf9ffe74497a976f999911db22c47a76adfcfd7f2b1fd 50.116.114.86 HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Date: Mon, 28 Nov 2022 07:58:10 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://offer.essayzon.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade Vary: Accept-Encoding Content-Encoding: gzip Transfer-Encoding: chunked --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2562) Size: 18982 Md5: 63ee57183fab114a32713852af479dea Sha1: a3235dd31a45b0b5590cc6ca85a1fd2c3d61e775 Sha256: ea1c9cd7723dc8709beaf9ffe74497a976f999911db22c47a76adfcfd7f2b1fd Alerts: Blocklists: - fortinet: Phishing
GET /1/myprize/boxwin/index_files/b45cbc066907105f9fdb6ff6f3de0bf3.png HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com	URL: offer.essayzon.com/1/myprize/boxwin/index_files/b45cbc0 (...) FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: fd0a52dab9715198deaac93ec52117c0443279db1ed9b186790806d7542e98aa 50.116.114.86 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 28 Nov 2022 07:58:11 GMT Server: Apache Last-Modified: Sun, 13 Feb 2022 14:01:51 GMT Accept-Ranges: bytes Content-Length: 2283 --- Additional Info --- Magic: PNG image data, 257 x 184, 8-bit colormap, non-interlaced\012- data Size: 2283 Md5: 57cffe641003f9a80834df4f706d16c3 Sha1: 900af1f1f75f11f547bf4bab2f9f88f0b3b0c38d Sha256: fd0a52dab9715198deaac93ec52117c0443279db1ed9b186790806d7542e98aa
GET /1/myprize/boxwin/scblogo.svg HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com	URL: offer.essayzon.com/1/myprize/boxwin/scblogo.svg FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: c4e5f36113fa97413824a66cda03979dc6d613e51372cc5cb8d5a5f3276fd22b 50.116.114.86 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 28 Nov 2022 07:58:11 GMT Server: Apache Last-Modified: Wed, 25 May 2022 08:49:01 GMT Accept-Ranges: bytes Content-Length: 4688 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 4688 Md5: 8429cbaafaab852c4c96bd0c7581ae90 Sha1: dff23ceeea694fcc2d20b4d4535882c59f18b3d5 Sha256: c4e5f36113fa97413824a66cda03979dc6d613e51372cc5cb8d5a5f3276fd22b Alerts: Blocklists: - fortinet: Phishing
GET /1/myprize/boxwin/scbgift.png HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com	URL: offer.essayzon.com/1/myprize/boxwin/scbgift.png FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: 21593b6b8a68c52c51ee24d26585509c781b005c3b137deec900e8024ce0c1c3 50.116.114.86 HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 28 Nov 2022 07:58:11 GMT Server: Apache Last-Modified: Wed, 25 May 2022 08:53:44 GMT Accept-Ranges: bytes Content-Length: 12725 --- Additional Info --- Magic: PNG image data, 500 x 250, 8-bit/color RGBA, non-interlaced\012- data Size: 12725 Md5: 4836fdb13d2e1c459f4fb02d68f3f322 Sha1: 0c95e8546345c52c95d69f21ba125d580bb26fc1 Sha256: 21593b6b8a68c52c51ee24d26585509c781b005c3b137deec900e8024ce0c1c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 28 Nov 2022 07:08:55 GMT cache-control: public,max-age=3600 age: 2956 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /1/myprize/boxwin/index_files/top_r.png HTTP/1.1 Host: offer.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://offer.essayzon.com/1/myprize/boxwin/index_files/mycss.css	URL: offer.essayzon.com/1/myprize/boxwin/index_files/top_r.png FQDN: offer.essayzon.com IP: 50.116.114.86 HASH: a3be9ce0f2372b71f3e6eacc7844e3edbf01a084b1ca8504ef838155daefcb61 50.116.114.86 HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Date: Mon, 28 Nov 2022 07:58:11 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <http://offer.essayzon.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Content-Encoding: gzip Transfer-Encoding: chunked --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2562) Size: 18983 Md5: c4b3f1ba2ee1ceba84df6cb128a0517f Sha1: 4f4fd84237534d02d7cdbe1c1de39b4779581674 Sha256: a3be9ce0f2372b71f3e6eacc7844e3edbf01a084b1ca8504ef838155daefcb61
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5532 Cache-Control: max-age=96053 Date: Mon, 28 Nov 2022 07:58:11 GMT Etag: "638328ac-1d7" Expires: Tue, 29 Nov 2022 10:39:04 GMT Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT Server: ECS (ska/F71B) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: a6fee11dfe1b88cd768a0ca3e2bd0c89 Sha1: 59cec9a44a4a92467678afe65f347f68641a2174 Sha256: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: abfe599b5b639c1753995cb739d6b9ecd0a26726d9ae9931a29d7859f47eb35e 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "ABFE599B5B639C1753995CB739D6B9ECD0A26726D9AE9931A29D7859F47EB35E" Last-Modified: Mon, 28 Nov 2022 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21600 Expires: Mon, 28 Nov 2022 13:58:11 GMT Date: Mon, 28 Nov 2022 07:58:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: e26f754062b7d473c41572d9c991ed5e Sha1: 23132e926ec074033bc13b65ddfdd2a42d0e7a46 Sha256: abfe599b5b639c1753995cb739d6b9ecd0a26726d9ae9931a29d7859f47eb35e
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: GwlhWEw6XlUvpzNX855lGg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 34.208.31.97 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 34.208.31.97 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: SyfrZL9Nz2DVOIbm6DRoEF7jVeQ= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6512 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:58:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6512 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:58:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6512 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:58:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6512 Expires: Mon, 28 Nov 2022 09:46:44 GMT Date: Mon, 28 Nov 2022 07:58:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F17eed5ca-e7b1-43be-b937-69356fce9d8a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4708 x-amzn-requestid: 6efd15cd-c944-42e7-8142-01360fbe4a25 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_JFbXIAMFc_g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-3c7d91eb7a2f3a9669f89d88;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: GDQn-_Np3qSCYR2kQJnoh6j3-aS25bPTNl13D6MkZpF1fkOhokkFbA== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:02:24 GMT age: 35748 etag: "a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4708 Md5: 4060284252d32701c42e2df4a83970a0 Sha1: a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da Sha256: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4908162-9f1d-4654-8d78-fe85386ce233.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7556 x-amzn-requestid: 1cda5313-2256-4830-bf84-2e6e15949d3e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR78KFTmoAMF4yg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9e7-452e36d718a298d12a2374a9;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: OWVkuAw6-nRNU_CVOgvsSSenSXnfSYSmJiKa60JvSaiJgPuXjJByZw== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:46:41 GMT age: 36692 etag: "1a542a53ba0b1cd0fb23257ebed8166555f16dfb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7556 Md5: 7e5051d8c06f69e1842a9295ce256a36 Sha1: 1a542a53ba0b1cd0fb23257ebed8166555f16dfb Sha256: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9430 x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR7wyGCIIAMFhgw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:01:16 GMT age: 35817 etag: "075531f525e625b117b2497f31139c9824d0e9c5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9430 Md5: 1f434933b5bd6377d299ada22d1ae7ef Sha1: 075531f525e625b117b2497f31139c9824d0e9c5 Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6c93814-fbc2-4f60-a417-7cb6ff99a2ef.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6263 x-amzn-requestid: 5c3da401-eb9e-4904-a7e9-5e74648b8b77 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_KFfWoAMF99A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d860-3110d65625e883502a5078a9;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: EpU6HS6f0BpRceJVfwhBhOgKMTMvdMZj4ST9DMATiqfA10pNplyPtQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:51:04 GMT age: 36429 etag: "c033d1ecdb9e7640f3df044e39053bed8292fcbc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6263 Md5: b24e349e9d22fb30fbc80497b512cead Sha1: c033d1ecdb9e7640f3df044e39053bed8292fcbc Sha256: 2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5989 x-amzn-requestid: db10fcc5-80ab-4650-af49-d5afe36706f3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR78LHQqIAMF9_g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9e7-4cbd19e3227894844807742c;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: P0Nx-FcvcV-f5cRPwZr5sEMb8pH3AoYFr185q_D0X2bE7z40nDn91w== via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:51:04 GMT age: 36429 etag: "21aa6418f3a0d2b64925b66d5fb9079b7e84a11c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5989 Md5: fa848cb85e85df184b078fe7aa95ae52 Sha1: 21aa6418f3a0d2b64925b66d5fb9079b7e84a11c Sha256: 37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8771 x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR6_MEAPoAMF0xw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw== via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:20:34 GMT age: 34659 etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8771 Md5: b0bd385532089b45a14e461abbecc1af Sha1: 3da359b1ba09138a425094715b9f3a2f8d0257fe Sha256: 803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd
GET /click HTTP/1.1 Host: tracker.essayzon.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://offer.essayzon.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: tracker.essayzon.com/click FQDN: tracker.essayzon.com IP: 3.70.16.242 3.70.16.242 HTTP/2 200 OK content-type: text/html; charset=utf-8 server: openresty date: Mon, 28 Nov 2022 07:58:11 GMT vary: Accept-Encoding accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced access-control-allow-origin: * etag: W/"12c-g6W6mfjiu2HgZOPjR8TsJ9uR8sU" x-response-time: 3.379ms expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-cache content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Phishing

                                        
                                            GET /1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com HTTP/1.1 

                                        
                                            
Host: offer.essayzon.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         50.116.114.86

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:10 GMT 

                                        
                                            
Server: nginx/1.21.6 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Accept-Ranges: none 

                                        
                                            
X-Server-Cache: true 

                                        
                                            
X-Proxy-Cache: MISS 

                                        
                                            
Content-Length: 4453 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1261)

                                                Size:   4453

                                                Md5:    4677ea970888b18bb47c4b7a0e3247f6

                                                Sha1:   0dfa445581b3daeac90d4e27797e8eacc122bd41

                                                Sha256: f12333816ac6a8c3975caaaad2ad15fc2d7be062dc7ce6449f7ef5f60ea3b1f9

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 6375 

                                        
                                            
Cache-Control: max-age=101958 

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:10 GMT 

                                        
                                            
Etag: "63833c71-1d7" 

                                        
                                            
Expires: Tue, 29 Nov 2022 12:17:28 GMT 

                                        
                                            
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT 

                                        
                                            
Server: ECS (ska/F71B) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    64b2a23eab6e5ae8c010ec7242be930c

                                                Sha1:   0673e4385ba01a5a245711bab96cafc34f765793

                                                Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=3258 

                                        
                                            
Expires: Mon, 28 Nov 2022 08:52:28 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:10 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    71f9c681a82440fd55e76c780a20e55d

                                                Sha1:   3147768cfbcdd06e0c6e69684292e68e99917a80

                                                Sha256: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: SNDV/U0wHBaw1FsSL1VbVSBhX+ZIVRE7XI/tchBd7amXGb3PlCCKYa2GWEQ96sSVokBoLVPNFA0= 

                                        
                                            
x-amz-request-id: PGA2HRR63VNZQRRT 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 07:44:57 GMT 

                                        
                                            
age: 793 

                                        
                                            
last-modified: Thu, 10 Nov 2022 09:21:27 GMT 

                                        
                                            
etag: "9ebddc2b260d081ebbefee47c037cb28" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    9ebddc2b260d081ebbefee47c037cb28

                                                Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39

                                                Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

                                        
                                            GET /1/myprize/boxwin/index_files/mycss.css HTTP/1.1 

                                        
                                            
Host: offer.essayzon.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com

                                         50.116.114.86

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:10 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Upgrade: h2,h2c 

                                        
                                            
Connection: Upgrade 

                                        
                                            
Last-Modified: Tue, 24 May 2022 08:19:50 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 7705 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (62302)

                                                Size:   7705

                                                Md5:    3e053ea10095d66cc50c79509d4c1ed6

                                                Sha1:   59150250db8d8260302623d780e55e1a2fa3c04f

                                                Sha256: 4889e31fb753ac70602d504cbde20fc8857e0bb576c424e0105bb7880895aafe

                                        
                                            GET /1/myprize/boxwin/index_files/b45cbc066907105f9fdb6ff6f3de0bf3.png HTTP/1.1 

                                        
                                            
Host: offer.essayzon.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com

                                         50.116.114.86

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:11 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Last-Modified: Sun, 13 Feb 2022 14:01:51 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Content-Length: 2283 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 257 x 184, 8-bit colormap, non-interlaced\012- data

                                                Size:   2283

                                                Md5:    57cffe641003f9a80834df4f706d16c3

                                                Sha1:   900af1f1f75f11f547bf4bab2f9f88f0b3b0c38d

                                                Sha256: fd0a52dab9715198deaac93ec52117c0443279db1ed9b186790806d7542e98aa

                                        
                                            GET /1/myprize/boxwin/scbgift.png HTTP/1.1 

                                        
                                            
Host: offer.essayzon.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com

                                         50.116.114.86

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:11 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Last-Modified: Wed, 25 May 2022 08:53:44 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Content-Length: 12725 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 500 x 250, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   12725

                                                Md5:    4836fdb13d2e1c459f4fb02d68f3f322

                                                Sha1:   0c95e8546345c52c95d69f21ba125d580bb26fc1

                                                Sha256: 21593b6b8a68c52c51ee24d26585509c781b005c3b137deec900e8024ce0c1c3

                                        
                                            GET /1/myprize/boxwin/index_files/top_r.png HTTP/1.1 

                                        
                                            
Host: offer.essayzon.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://offer.essayzon.com/1/myprize/boxwin/index_files/mycss.css

                                         50.116.114.86

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:11 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Expires: Wed, 11 Jan 1984 05:00:00 GMT 

                                        
                                            
Cache-Control: no-cache, must-revalidate, max-age=0 

                                        
                                            
Link: <http://offer.essayzon.com/wp-json/>; rel="https://api.w.org/" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2562)

                                                Size:   18983

                                                Md5:    c4b3f1ba2ee1ceba84df6cb128a0517f

                                                Sha1:   4f4fd84237534d02d7cdbe1c1de39b4779581674

                                                Sha256: a3be9ce0f2372b71f3e6eacc7844e3edbf01a084b1ca8504ef838155daefcb61

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "ABFE599B5B639C1753995CB739D6B9ECD0A26726D9AE9931A29D7859F47EB35E" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=21600 

                                        
                                            
Expires: Mon, 28 Nov 2022 13:58:11 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:11 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    e26f754062b7d473c41572d9c991ed5e

                                                Sha1:   23132e926ec074033bc13b65ddfdd2a42d0e7a46

                                                Sha256: abfe599b5b639c1753995cb739d6b9ecd0a26726d9ae9931a29d7859f47eb35e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=6512 

                                        
                                            
Expires: Mon, 28 Nov 2022 09:46:44 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:12 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=6512 

                                        
                                            
Expires: Mon, 28 Nov 2022 09:46:44 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 07:58:12 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F17eed5ca-e7b1-43be-b937-69356fce9d8a.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4708 

                                        
                                            
x-amzn-requestid: 6efd15cd-c944-42e7-8142-01360fbe4a25 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR6_JFbXIAMFc_g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d860-3c7d91eb7a2f3a9669f89d88;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: GDQn-_Np3qSCYR2kQJnoh6j3-aS25bPTNl13D6MkZpF1fkOhokkFbA== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 22:02:24 GMT 

                                        
                                            
age: 35748 

                                        
                                            
etag: "a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4708

                                                Md5:    4060284252d32701c42e2df4a83970a0

                                                Sha1:   a73feecd0e221f7c7a3b74b75aeaa81bd9baa1da

                                                Sha256: 53eca0f8435d6e2e62962ef80d4597afad2773a582746d523f7f5d30c3e07b8e

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9430 

                                        
                                            
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR7wyGCIIAMFhgw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q== 

                                        
                                            
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 22:01:16 GMT 

                                        
                                            
age: 35817 

                                        
                                            
etag: "075531f525e625b117b2497f31139c9824d0e9c5" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9430

                                                Md5:    1f434933b5bd6377d299ada22d1ae7ef

                                                Sha1:   075531f525e625b117b2497f31139c9824d0e9c5

                                                Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd94c980-e701-4603-9381-0bd47116d31d.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5989 

                                        
                                            
x-amzn-requestid: db10fcc5-80ab-4650-af49-d5afe36706f3 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR78LHQqIAMF9_g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d9e7-4cbd19e3227894844807742c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: P0Nx-FcvcV-f5cRPwZr5sEMb8pH3AoYFr185q_D0X2bE7z40nDn91w== 

                                        
                                            
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 21:51:04 GMT 

                                        
                                            
age: 36429 

                                        
                                            
etag: "21aa6418f3a0d2b64925b66d5fb9079b7e84a11c" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5989

                                                Md5:    fa848cb85e85df184b078fe7aa95ae52

                                                Sha1:   21aa6418f3a0d2b64925b66d5fb9079b7e84a11c

                                                Sha256: 37d299c166e3350dee6dee647e98a86f8bd916d186bae12c42764ed0a3177085

URL	offer.essayzon.com/1/myprize/boxwin/thto.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NjIyMjgwIiwiaGFzaCI6Ijg3NDY3N2E1NDUwMzI0YTI3MzFhNGYxN2VjNWNmMTdjZDFlNGY4MWQifQ==&bemobdata=c=9b2c7d58-7e2d-49c9-94d9-185bb5ab8d98..l=41078ebe-73f3-477d-bae0-7eb73d2c83bf..a=0..b=1..r=tracker.essayzon.com
IP	50.116.114.86 (United States)
ASN	#46606 UNIFIEDLAYER-AS-1
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-28 07:58:22 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	5
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (9)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 50.116.114.86

Last 5 reports on ASN: UNIFIEDLAYER-AS-1

Last 5 reports on domain: essayzon.com

Last 4 reports with similar screenshot

JavaScript

Executed Scripts (8)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 8b9cab4256b873beb47d6fd5cac02a1ec39905ee3a6dd2dd9e350ccb831baf89

Executed Writes (0)

HTTP Transactions (31)

Overview

Domain Summary (9)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 50.116.114.86

Last 5 reports on ASN: UNIFIEDLAYER-AS-1

Last 5 reports on domain: essayzon.com

Last 4 reports with similar screenshot

JavaScript

Executed Scripts (8)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 8b9cab4256b873beb47d6fd5cac02a1ec39905ee3a6dd2dd9e350ccb831baf89

Executed Writes (0)

HTTP Transactions (31)

Network Intrusion Detection Systems