track.rendan-compto.com/cbf7eb93-c0ee-428f-9628-010fc6b1e80d/2
18.195.195.71302 Found 0 B URL User Request GET HTTP/2 track.rendan-compto.com/cbf7eb93-c0ee-428f-9628-010fc6b1e80d/2
IP 18.195.195.71:443
Certificate IssuerLet's Encrypt
Subjecttrack.rendan-compto.com
Fingerprint85:66:23:2D:5C:EF:99:4A:D4:66:2D:4C:B6:89:75:B4:A2:A0:86:C1
ValidityTue, 17 Oct 2023 05:48:58 GMT - Mon, 15 Jan 2024 05:48:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cbf7eb93-c0ee-428f-9628-010fc6b1e80d/2 HTTP/1.1
Host: track.rendan-compto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 23 Oct 2023 22:57:56 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
pragma: no-cache
set-cookie: cbf7eb93-c0ee-428f-9628-010fc6b1e80d-v4=2Mzc2pRiZKPuqOIitBnfy6sjOktLjD6Ms9o3ymrDxco; Max-Age=86400; Expires=Tue, 24-Oct-2023 22:57:56 GMT; Domain=track.rendan-compto.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=sl9mmADPPW5FDMaDXe9lxCAsuosiuqXmR-XR527vROeS1xdgzt8Ltj3qLkOpvmFgcbQXYOPdlDTGUbOCEYtHBvIxAYHFI-SWDsnOXG6lBCHFtHf8rVtSBSZ5c_qWG3Hq0q47xIUjPEFqoEHBxmmpqEj3k3jPDt0XE4tq2ZCbxtCnj1_LGa1-EmCdr7iR-lWt5EpGMLJcCAZdOh0RrmijFxoKugWDs6PoltNbBcHAHYn7vTF3LoiFOcgwHOa68UlBcr8A1PoXUTsue31gqbewwXalPz9-PrG-yRWLPpxpXgKkvxEVGxIpYVdHub4DH4rRdqbMSMkH5svujiMJykEwh5zXny5D6KZzJgXXb-ORSlgK60Uh75OQgZgsTxEIBjaWAEdWgAKL63Hy2cnlTwEgEw; Max-Age=86400; Expires=Tue, 24-Oct-2023 22:57:56 GMT; Domain=track.rendan-compto.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/brflag.png
45.76.148.82200 OK 1.6 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/brflag.png
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash 3f09355b3e373835b54ff04bf9f08d42
c0c211336633fda9476027ee45d4ad43fd545704
d6d664e54e7656b16e5970c451f1da24ab0eb39cde2b2e0f60ae36aaec6d3991
GET /br3icu/brflag.png HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: image/png
content-length: 1560
last-modified: Sun, 05 Mar 2023 04:44:21 GMT
etag: "618-5f61fd5071012"
accept-ranges: bytes
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/checkmark.png
45.76.148.82200 OK 1.4 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/checkmark.png
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Hash c5c7963ac4910cc213df781683ca2b23
4ac7e6fd56d69d7587fd3406fded70fb5237e494
885f933eb3e99af07249f0a9b09e87d06a88d75ce5f3c3bae6d22057ad971663
GET /br3icu/checkmark.png HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: image/png
content-length: 1383
last-modified: Sun, 05 Mar 2023 04:44:23 GMT
etag: "567-5f61fd5203591"
accept-ranges: bytes
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/loading.gif
45.76.148.82200 OK 5.4 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/loading.gif
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type GIF image data, version 89a, 50 x 50\012- data
Hash f60928ffecf24d58778208a0f57740e6
292e0fa1ce4891036c51e28b22afbc80dba1be6f
67bdb1ae29193a59a00ab429adecf6639708ad554ecac21eb0cf5837c271ade5
GET /br3icu/loading.gif HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: image/gif
content-length: 5397
last-modified: Sun, 05 Mar 2023 04:44:24 GMT
etag: "1515-5f61fd52a3810"
accept-ranges: bytes
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/bootstrap.min.css
45.76.148.82200 OK 121 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/bootstrap.min.css
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type ASCII text, with very long lines (65367), with CRLF line terminators
Size 121 kB (121429 bytes)
Hash 835f8986c8cd8f53205e4bcc2ef5a7b3
70c1c69150b935bc041da615444b89ee4b74d706
4e787764ab7abe57a9375d3243a755446740055b4c593ff1e73ed12eba7cf980
GET /br3icu/bootstrap.min.css HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 05 Mar 2023 04:44:21 GMT
etag: W/"1da55-5f61fd4fd6b53"
content-encoding: br
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
45.76.148.82200 OK 7.8 kB URL User Request GET HTTP/2 96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
IP 45.76.148.82:443
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9033), with no line terminators
Hash e012c14463987ed33141946d0b518596
e54a47910d3865aeac7b91592117870402ef5d2d
bcdb8204a518acd665aae80bc891ee11cd0cc75e66b55a7e35f18ec6f5555288
GET /br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642 HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
ie.kis.scr.kaspersky-labs.com/1B74BD89-2A22-4B93-B451-1C9E1052A0EC/init?url=https%3A%2F%2F96.winprizes696.monster%2Fbr3icu%2Findex.php%3Fcity%3DOslo%26model%3DDesktop%26brand%3DDesktop%26cep%3DAI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ%26lptoken%3D16b298d2108236497642&nocache=18616
0.0.0.0 0 B URL GET ie.kis.scr.kaspersky-labs.com/1B74BD89-2A22-4B93-B451-1C9E1052A0EC/init?url=https%3A%2F%2F96.winprizes696.monster%2Fbr3icu%2Findex.php%3Fcity%3DOslo%26model%3DDesktop%26brand%3DDesktop%26cep%3DAI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ%26lptoken%3D16b298d2108236497642&nocache=18616
IP 0.0.0.0:0
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1B74BD89-2A22-4B93-B451-1C9E1052A0EC/init?url=https%3A%2F%2F96.winprizes696.monster%2Fbr3icu%2Findex.php%3Fcity%3DOslo%26model%3DDesktop%26brand%3DDesktop%26cep%3DAI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ%26lptoken%3D16b298d2108236497642&nocache=18616 HTTP/1.1
Host: ie.kis.scr.kaspersky-labs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://96.winprizes696.monster
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
shanaurg.net/pfe/current/micro.tag.min.js?z=3899161&sw=/sw-check-permissions-8f7b4.js
139.45.197.250200 OK 27 kB URL GET HTTP/2 shanaurg.net/pfe/current/micro.tag.min.js?z=3899161&sw=/sw-check-permissions-8f7b4.js
IP 139.45.197.250:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subjectshanaurg.net
FingerprintC8:98:E1:9A:75:67:47:8F:1F:04:04:88:9D:A5:C6:ED:74:BA:16:68
ValiditySun, 06 Aug 2023 05:05:15 GMT - Sat, 04 Nov 2023 05:05:14 GMT
File type ASCII text, with very long lines (26862), with no line terminators
Hash 868ff391149b8c33f6aecf401bc8204b
3619992c28cb482ead4b479d42e6c8f362a359eb
742b2ae34faf5c9d2eae29e03dec10f96c5383043da38de7ffeb6e2e3439d774
GET /pfe/current/micro.tag.min.js?z=3899161&sw=/sw-check-permissions-8f7b4.js HTTP/1.1
Host: shanaurg.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:58 GMT
content-type: application/javascript
last-modified: Mon, 23 Oct 2023 14:36:28 GMT
etag: W/"653684ec-68ee"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/detect_device.js
45.76.148.82200 OK 777 B URL GET HTTP/2 96.winprizes696.monster/br3icu/detect_device.js
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type ASCII text, with very long lines (902), with no line terminators
Hash f5bc91d4c00933aa1ab24e15bfbf40e9
a2b611b8a23f0e37db15a8274a022b03c0729ae7
23c42e399983c04c508c26fb13ab4a40fd3c18ca379d87dad0765264d5090064
GET /br3icu/detect_device.js HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sun, 05 Mar 2023 04:44:23 GMT
etag: W/"309-5f61fd5235271"
content-encoding: br
X-Firefox-Spdy: h2
96.winprizes696.monster/favicon.ico
45.76.148.82404 Not Found 371 B URL GET HTTP/2 96.winprizes696.monster/favicon.ico
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (386), with no line terminators
Hash ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74
GET /favicon.ico HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Mon, 23 Oct 2023 22:57:59 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/style.css
45.76.148.82200 OK 1.5 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/style.css
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type ASCII text, with very long lines (1631), with no line terminators
Hash ca6ab4b237d92b23b7d3c786dd0a75db
98de24d6fc6d64f947f9a7ecc6158dcd0e5ae7b3
65d7d27a585905c0035fac22663334c88b370af4a36f2ecefc76b1d015dfa9b8
GET /br3icu/style.css HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 05 Mar 2023 04:44:25 GMT
etag: W/"5ae-5f61fd535a1f0"
content-encoding: br
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/main.js
45.76.148.82200 OK 99 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/main.js
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type ASCII text, with very long lines (330), with CRLF line terminators
Hash bea6d34611435f8a87b0774ecd6efc02
d979133b5b02f4d5ac3341552ea7202f77996191
99d25eda0ae02ebd0cc72d58f7fd20bfa7156418ceb848e0cfd5e75bfb240e90
GET /br3icu/main.js HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sun, 05 Mar 2023 04:44:24 GMT
etag: W/"1813c-5f61fd52d2610"
content-encoding: br
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/jquery.min.js
45.76.148.82200 OK 87 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/jquery.min.js
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type ASCII text, with very long lines (32030), with CRLF line terminators
Hash 5b5a269bd363e0886c17d855c2aab241
042dd055cd289215835a58507c9531f808e1648a
1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /br3icu/jquery.min.js HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sun, 05 Mar 2023 04:44:24 GMT
etag: W/"152b9-5f61fd5293e10"
content-encoding: br
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/mobile-detect.min.js
45.76.148.82200 OK 37 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/mobile-detect.min.js
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type ASCII text, with very long lines (32053), with CRLF line terminators
Hash c11e13de6e306b4d983d49054ed1fbca
6f0f99f4ed38803dc8edc852c223093ecce65c98
68863e14275c192461e1780c12f9c630ae15adf58784409d4b158c09bfecf314
GET /br3icu/mobile-detect.min.js HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sun, 05 Mar 2023 04:44:24 GMT
etag: W/"8edb-5f61fd52d6490"
content-encoding: br
X-Firefox-Spdy: h2
96.winprizes696.monster/br3icu/countries.js
45.76.148.82200 OK 11 kB URL GET HTTP/2 96.winprizes696.monster/br3icu/countries.js
IP 45.76.148.82:443
Requested by https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Certificate IssuerLet's Encrypt
Subject96.winprizes696.monster
FingerprintDF:3F:14:D9:67:2B:89:06:E6:8C:7E:E8:20:52:B2:92:6A:58:DC:B9
ValiditySun, 24 Sep 2023 06:45:21 GMT - Sat, 23 Dec 2023 06:45:20 GMT
File type ASCII text, with CRLF line terminators
Hash a8fd4d926fa4a5f16ea2dd1e65deb7a6
8c055c5695071d0547ba284710b206aa16a9b3d9
a90a0feff0b27f7f8af357f7f3e35d3c7bc49b2c36067bb1ed9e3a64e2bb29e3
GET /br3icu/countries.js HTTP/1.1
Host: 96.winprizes696.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://96.winprizes696.monster/br3icu/index.php?city=Oslo&model=Desktop&brand=Desktop&cep=AI3_ozNarmf3KMnfcv-mcDfVs-dQ-Fju2VomYiy87wyxcpngn2fJZd0N_u0iCZOApvxvKmZrMapkST1_9ofJYH0fVHT7dvoIOJY12ypnI6JyM2ayvdLroiTKMb5t9Y1XIv9uQ6haJM36ZGhjU9fYDoMfcQ9HWeCMAsLgfUk0-SZlhnrAMnyqW2CPOT7hhwdUUuBBIkY-N_S-EA1gC-yCk03Uf4BuMrZWFAkNv9UnuYrYcqLiJoEJyoFTtcDEjU8jSdzkEugyLuJi4beJ-Sp5fP-7A_VpFC_LSitkU_ZG6S8sYa1sAIJxqHTKADVIA0H_1F-YO8xbFS9zGY8FmKUCuM9dihc3abAhSsz_9yQcPiShYOfy3-hSWy4w8hHuvXykl1gJji2zWoE1Y-FigGNLlQ&lptoken=16b298d2108236497642
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 22:57:57 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sun, 05 Mar 2023 04:44:23 GMT
etag: W/"29e7-5f61fd521db71"
content-encoding: br
X-Firefox-Spdy: h2