| clickwinner.icu/3c0dc36f-06ce-42a6-9ad7-339dc04e55d7 |  18.156.16.63 | 302 | 0 B |
URL HTTP/1.1clickwinner.icu/3c0dc36f-06ce-42a6-9ad7-339dc04e55d7 IP18.156.16.63:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3c0dc36f-06ce-42a6-9ad7-339dc04e55d7 HTTP/1.1
Host: clickwinner.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: a0ffd8ce-f524-4a6b-8cce-f5bdbf82ee84-v4=CthuqipNxsH3H_63Ha-OmgB5WCDLNRaO5j8zyFKaYkA; cep-v4=qffqlTOuKGmobrXcI1Z7AKnPUbDhgAZ6826s5PSGXQIZii94rZIKV3pRDVr9SR096GOLxuhswG9r8sVM9kmouVNGo2cejFmo-P-BtRVUu6SlVQco9Y0S4htdWBiBJiHAb4E2hunf2veekgYn11XHTsbFSmZhnUrkz9HkQqx7XGVnZpLaULsQweiMSVDeD26or2rYtTKT9CIK7Gr166dULy8FJuQVzes4dJSdLb0S6I7N28zrVt3cDYBoxikbUJ_JkUH62HVOFn-imlAKHnRyVCtJ2koL6rrEw6snDyoQjKYmf0L6zwmRGkZP4N9LnDCkIPu_wqgq-r10_mjQFh2dw9Wna37FEApI9k6rfAwdSyA
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Fri, 25 Nov 2022 06:48:06 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Pragma: no-cache
Set-Cookie: 3c0dc36f-06ce-42a6-9ad7-339dc04e55d7-v4=JsppY8yUgKvLtrZK-xfH5JXJ8ALVzBj-MENUnhlI1-0; Max-Age=86400; Expires=Sat, 26-Nov-2022 06:48:06 GMT; Domain=clickwinner.icu; Path=/; HttpOnly
cep-v4=FbWQWfRPezr0BKzlc0C-qAau_eh3dHNTkPrbg4Azog4mH15-YgAH_0QYbn0ewAEM9xoMJ4nznnh-SwAa8bP5xi6VR6XMamSPghRPUWSQT447GC5AD7Fu0Zn4rQ0QUn6FMs1A4uMb-ZpzMFG0FgWb911nYoPJw2xA1mefpIEECMJNIEVTSLTDCDweTjhB_qC1qUf9-iLXvEycFy1gTMjrzsOTgzzawph8RT20G8SBoitclo96r-MwcjwNlM3C-Ttzd_DAGIEGih66Hpoh_EortWIJQuPl8ntZtyly-DQziY3nCzRLsqg9JlqLc4IdWsrs2krw24Q3yfkseNB9cb7bbgaelYVS5ml15-mczBlmVY0; Max-Age=86400; Expires=Sat, 26-Nov-2022 06:48:06 GMT; Domain=clickwinner.icu; Path=/; HttpOnly
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash7c60904d097cde276e4e5632cef1b9f1 4f805026462589345d85e8df2d18eafba6237504 12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6820
Expires: Fri, 25 Nov 2022 08:41:46 GMT
Date: Fri, 25 Nov 2022 06:48:06 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashaf40a2fcf8debb90c3608002da6c907a 3c75d6c0b557a3bd8d5db50155b8d896e852c145 555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4446
Cache-Control: max-age=104231
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 06:48:06 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:45:17 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4d7e4eed097b9c4e5d509419f1cfc85a 290bb3d428a7c6330e2e3d73a952b16f820896c8 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 06:19:04 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1742
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash260e9998c20d831b66f1029c8f47aac9 716d630f647c54dc69a7f9c63a6cac294b3df7f7 c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5716
Expires: Fri, 25 Nov 2022 08:23:22 GMT
Date: Fri, 25 Nov 2022 06:48:06 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8ubx4Y5tsVzJ5BruFMUuavlRom3U2TmyG3fUFn9ee0Cz/4b3N39ALz0tJRHGBF81oSBQ9DNob60=
x-amz-request-id: XVVS75KV3DNRHFDW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 06:43:44 GMT
age: 262
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 06:48:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.r2m02.amazontrust.com/ | 54.230.80.227 | 200 OK | 471 B |
URL HTTP/1.1ocsp.r2m02.amazontrust.com/ IP54.230.80.227:0
Hash89f1d40a1fe3552eb04dae93e48ef64e 88f4e1714eba842c234cd462c7fb0e70f251cc2c 8fa9a929e907016b7f1e0a3598580aeecfbe31925f77af3e1b850efdd682517e
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 25 Nov 2022 06:48:06 GMT
Etag: "637f40d2-1d7"
Server: ECS (dcb/7F3A)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aOKFXR439UB8stxicIt6IkGRDor2KpRqLP--zFwau19CBPIZdQlHAA==
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 06:08:53 GMT
cache-control: public,max-age=3600
age: 2353
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/notification.png | 54.230.111.113 | 200 OK | 449 B |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/notification.png IP54.230.111.113:0
File typePNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data Hashbd5203f2cc9e7a9125e4575e029541b0 9fa565ab2f4b55da4735b79e529562252b3c9afe db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/notification.png HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 449
date: Thu, 24 Nov 2022 09:02:57 GMT
last-modified: Fri, 04 Nov 2022 11:05:19 GMT
etag: "bd5203f2cc9e7a9125e4575e029541b0"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _sdGqhzi6VMxSubJZmKvpRZQQ9dAdsBEEqEQJIZkQ9U-Ud0oGdOJbg==
age: 78311
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/loader.gif | 54.230.111.113 | 200 OK | 5.1 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/loader.gif IP54.230.111.113:0
File typeGIF image data, version 89a, 50 x 50\012- data Hashed786659a534e0d183c09a90c50abc9d a6c3d90bfaa86a7cda490bc5d04c8939c31a414e cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/loader.gif HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 5083
last-modified: Fri, 04 Nov 2022 11:05:19 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:47 GMT
etag: "ed786659a534e0d183c09a90c50abc9d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PbkjTTkPGyKAo18xXJkZBIsi0NMyiMKV2F60TZLsr7iRojgVNtxRdA==
age: 4401
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/css/app.css?id=c588c17324f2be0e0ec9 | 54.230.111.113 | 200 OK | 33 B |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/css/app.css?id=c588c17324f2be0e0ec9 IP54.230.111.113:0
File typeASCII text, with no line terminators Hashc588c17324f2be0e0ec90a18f39e7d7c 69d360eddd15f527aac7f7e610346517732b7770 b83e8830b6b2f1253a78f90191cf1087e8fd7638831fd4c1376a7a6029297240
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement | | fortinet | Phishing | |
GET /1/prizewheel/iphone13/fr-mg/css/app.css?id=c588c17324f2be0e0ec9 HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 33
last-modified: Fri, 04 Nov 2022 11:05:19 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:46 GMT
etag: "c588c17324f2be0e0ec90a18f39e7d7c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AY52OgtktD8a_ZfFEFdMcLl3ktniI7bnp390JMH0neYGZ0wu_gibqg==
age: 4402
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/js/app.js?id=15b1bae461854d516179 | 54.230.111.113 | 200 OK | 977 B |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/js/app.js?id=15b1bae461854d516179 IP54.230.111.113:0
File typeASCII text, with very long lines (977), with no line terminators Hash15b1bae461854d516179a34a8c9b5f08 330c1d191253fe07c5fe6b5af37872408f2e5904 1bd25e467ea078265aee433e0cf9732a7e127514304634590a2de17fb2330896
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/js/app.js?id=15b1bae461854d516179 HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 977
date: Thu, 24 Nov 2022 09:02:56 GMT
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
etag: "15b1bae461854d516179a34a8c9b5f08"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WsG9ngMcPThJUYHtALsea7_y8tiGlkhXk7Utw7NXQ3_u9GeOtJnSXg==
age: 78311
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/prizewheel_spinner.jpg | 54.230.111.113 | 200 OK | 32 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/prizewheel_spinner.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3\012- data Hashd4655cba21d806e849eed4e4119fbe1a 6453039d85005643e9d65074ca022f63b5d47cdd 90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32496
last-modified: Fri, 04 Nov 2022 11:05:19 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:48 GMT
etag: "d4655cba21d806e849eed4e4119fbe1a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pY3uCMf-rwXRX4WrZsueTJu-8LUMo6HiZgX1YLzGLFgYKcWRItxCBg==
age: 4400
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/prizes/iphone-12-pro-max/default@0.5x.png | 54.230.111.113 | 200 OK | 32 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/prizes/iphone-12-pro-max/default@0.5x.png IP54.230.111.113:0
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data Hashc562f63263ffff2688791c38014b36bc 59fe19592cb3f6a2709c418026f0a1ddb12c1314 c331ce815fcd0ed99bc592c082eed6e51efd0f107d2ae967021d0273def59ae8
GET /1/prizewheel/iphone13/fr-mg/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 32266
last-modified: Fri, 04 Nov 2022 11:05:19 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:48 GMT
etag: "c562f63263ffff2688791c38014b36bc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _wG8Q9slL-dvbjL4BkDNkO0kVyyC83twQLEblW-X3sc4326xe6RgSg==
age: 4400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfb6949e7abaa473393f7c604691de14f 599681bba3947709baa603bbae2dd7afd04059a4 36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6308
Cache-Control: max-age=101030
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 06:48:07 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:51:57 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash5d608c50d2b9b484de63149c6a59a661 f33ce6432abeaf5369dbbff4218a09fc7f85452a 49d236c8214bafbef86e380e32aa49c041f0f4df2ce508de9842191c1fa8f9ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "49D236C8214BAFBEF86E380E32AA49C041F0F4DF2CE508DE9842191C1FA8F9FF"
Last-Modified: Wed, 23 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6657
Expires: Fri, 25 Nov 2022 08:39:04 GMT
Date: Fri, 25 Nov 2022 06:48:07 GMT
Connection: keep-alive
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6 | 54.230.111.113 | 200 OK | 54 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6 IP54.230.111.113:0
File typeASCII text, with very long lines (65475) Hash7ac6343812e86886e612bcc29e47bd48 e3e19128cfda493c895f23bcd9b32e36c7a77cc4 2b6c332bcaae4fd2f5768d2c4b8e09161dab79c66ca2559994ce6f883c82324b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /1/prizewheel/iphone13/fr-mg/js/landers/prizewheel-fb/app.js?id=c3c399d8b44b50eee3e6 HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 24 Nov 2022 09:02:57 GMT
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
etag: W/"cdf97653c213f02233f50a1ec975633c"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jvI7PQc1BT2AgEA0SYbqkPh_L28SSedJmH9uNN4JZYyda7BipVkCWA==
age: 78311
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/female/3@0.25x.jpg | 54.230.111.113 | 200 OK | 2.7 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/female/3@0.25x.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Hash2790f79b7e764407ae4b87a9dc30734b 30f0a1e4d30ac25108f2d0487f49944fbe630b72 8970ba9af5b39727ac25d42ab540c42ae7f58de4011fadb8efd2f5f317a8d575
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/profiles/african/female/3@0.25x.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2727
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:49 GMT
etag: "2790f79b7e764407ae4b87a9dc30734b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BlnCdaj6ukTAJwJF9TtwZfk5xXT1mBvzKg7gkzjVXBEVJvIq5H8m5w==
age: 4399
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/male/3@0.25x.jpg | 54.230.111.113 | 200 OK | 2.5 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/male/3@0.25x.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Hash2c188d082f97b0a5b29c92dbaf7a9787 f2a3828b68ba4d06d450832a977c48a22360d5eb afc758b894177d4003b5d02d80cd023429c99cfc3cd880804570d237cf6a96f0
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/profiles/african/male/3@0.25x.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2518
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:49 GMT
etag: "2c188d082f97b0a5b29c92dbaf7a9787"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZsKJy-aVhCWc5bIHat3w_NuaTcqyFBlRvy5BMh8KBJf-zitOW2RvZA==
age: 4399
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/female/6@0.25x.jpg | 54.230.111.113 | 200 OK | 2.8 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/female/6@0.25x.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Hashaf242991b9a56424739c63a6bd4090a7 7b41b3b2cfbbe69a865efa8863883bf029738b6e c53bda952fa4ca1869dfb4fd7db948ef87f1a8c8f2e6633e2320465f01f0829f
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/profiles/african/female/6@0.25x.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2766
date: Thu, 24 Nov 2022 09:02:58 GMT
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
etag: "af242991b9a56424739c63a6bd4090a7"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gHDNGc-OQo0bx8ClyESqOEy3PINMJRUBIBdxk1BCDlTFtqusjhQoIg==
age: 78310
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/female/1@0.25x.jpg | 54.230.111.113 | 200 OK | 2.8 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/female/1@0.25x.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Hash9ef452251daa9ff9fbdc5fe827a35061 2cb40a02efce5fd8772f57b8e9737018fed3f9ba 355126576c7a0bdbbe771a2b039d093c855efe6805941a36456324a2076e2ce1
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/profiles/african/female/1@0.25x.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2781
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:52 GMT
etag: "9ef452251daa9ff9fbdc5fe827a35061"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GxN5HtaMm-nBL9lNZ7WqR9jYuwGZDJcUfQoJ28HhncMYbLBtXYgl4Q==
age: 4396
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/male/2@0.25x.jpg | 54.230.111.113 | 200 OK | 2.1 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/male/2@0.25x.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Hash0f15632c24d4646c58f30feaa3baaa8a a7f319366432f5a63d7f11d30b0a6c9cb6398b64 4118d09fb21a7f34160f470078f6dcba042e8a07e2b4e32de12a4dcd9c5e7da8
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/profiles/african/male/2@0.25x.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2053
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:52 GMT
etag: "0f15632c24d4646c58f30feaa3baaa8a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BmoobbDSqb_Xv9VbCjY5IK_zS7phEtT77_ayquNekzR0iW2dM63OFw==
age: 4396
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/male/9@0.25x.jpg | 54.230.111.113 | 200 OK | 3.1 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/male/9@0.25x.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Hash4c30d4f61201b822adcfa58dbe32389c 9d9edd23a3b074135d9e043b5d1e52d8dbe29c91 19d491c137daf159170ed6d6340c33b11806347b18b2e89840989b914346d9f4
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/profiles/african/male/9@0.25x.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3146
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:50 GMT
etag: "4c30d4f61201b822adcfa58dbe32389c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hJRfSOzzWThUcaKe8cCUE90So6pHGvw8uHbpXjF14-fMAAukoCR2Cw==
age: 4398
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/male/10@0.25x.jpg | 54.230.111.113 | 200 OK | 2.3 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/male/10@0.25x.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Hash2ec37a714ba9202b2492cc1eff504041 29d005604784110044c80c13610ec1fe946a7d83 278b0f8b52650d39e549fc69ea49d62d3bdd0c41b3ffd939da265842b6e40369
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/profiles/african/male/10@0.25x.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2302
date: Thu, 24 Nov 2022 09:02:58 GMT
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
etag: "2ec37a714ba9202b2492cc1eff504041"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: en0-qF6pqftOB4UHxw1uwmZD_99OKvxQc3NISlgOiTZVDZpA3Vn_zQ==
age: 78310
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/prizes/iphone-12-pro-max/proof.jpg | 54.230.111.113 | 200 OK | 23 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/prizes/iphone-12-pro-max/proof.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 339x450, components 3\012- data Hash029d38095e06ced0688fd67a58e70781 b5bdaddeb39b947c35f883f001f34dd163bcb362 5e41534f027f676ce89db3b87319ffbdc1a1e7515e379f80f476e0989fa4bcc1
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/prizes/iphone-12-pro-max/proof.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 23152
date: Fri, 25 Nov 2022 05:34:50 GMT
last-modified: Fri, 04 Nov 2022 11:05:19 GMT
etag: "029d38095e06ced0688fd67a58e70781"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iKT07yRiVCoQyiP7QTeG9b_xXqBYCfRuDbpiITH2PFo5HK2YIeEEkw==
age: 4398
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/female/5@0.25x.jpg | 54.230.111.113 | 200 OK | 2.0 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/profiles/african/female/5@0.25x.jpg IP54.230.111.113:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Hash732da0e5f3968ec3d9014a6bbb62c04a 5d306c8778fdcac19f03542fccaf31df1cb8a783 d3eefd5709b25e1bb1129cccb1da22e54816cb2d15a2ed4cfa045b57579a7ef8
| Analyzer | Verdict | Alert |
|---|
| urlquery | | Scam / Brand infringement |
GET /1/prizewheel/iphone13/fr-mg/img/profiles/african/female/5@0.25x.jpg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1960
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 25 Nov 2022 05:34:52 GMT
etag: "732da0e5f3968ec3d9014a6bbb62c04a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8L4tvJzCXl6_-wIrO2MTmw03SlZLaOq5c1A8ZwOLSCp7t2elDlCnmA==
age: 4396
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.148.69.31 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.148.69.31:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1Yw/ZYIcoXhbGiIaP3AFDQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pJV3/aZ51NQpTjv5E7CR+mTK8kU=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb75c00c21f5854618bc06d14b8d83c40 ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9646
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 06:48:08 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb75c00c21f5854618bc06d14b8d83c40 ae14f585ae9682e6c2fad146c12c00ee4d83e8f3 a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9646
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 06:48:08 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe2580ebded0a32ceecc3083ae1db2b37 2ec124224738807229328a3ade6ca493ccf4b287 010eeda33c923e2166851da1e131dcc21419d1f4f28995617ca93332ce4be08c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10679
x-amzn-requestid: aec8d040-d4e6-4185-b71e-7c049617ebc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b4J3VEM5IAMFtcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637989c8-42b520ea3af2a2086ad416ad;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 01:58:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GkCprkFbPK6I-bo5k-rs37xaRDpqgUYbOydu2fd5-fTwqQ-d5lWlWw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 05:12:48 GMT
age: 5720
etag: "2ec124224738807229328a3ade6ca493ccf4b287"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/fb-like.svg | 54.230.111.113 | 200 OK | 9.6 kB |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/img/fb-like.svg IP54.230.111.113:0
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4627), with no line terminators Hasha3ec66f06f8172cc7e3251dc84c2fbd8 f99eabf547c37a1af48e99d9f76b6725ab499493 eb0e9023607cb08d7786201332aecabb90d9abd180b99cfe9561c01985dda4ee
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /1/prizewheel/iphone13/fr-mg/img/fb-like.svg HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 25 Nov 2022 05:34:48 GMT
last-modified: Fri, 04 Nov 2022 11:05:19 GMT
etag: W/"765203989756e91925e8f947e660b644"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: olE6BsI4PLwJDRG3Lar9JEkb3utmZsZ45rnwjTv2NEWOnqeKgq6Z8g==
age: 4400
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg | 34.120.237.76 | 200 OK | 4.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4006a9037ab5f28dca62b0aa7a704c41 74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b 556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 16840
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1abe4f62-70d8-471a-89fc-79dd854e637c.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1abe4f62-70d8-471a-89fc-79dd854e637c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7e97ba6c4c94a299553238e643a3acc7 9be5a5497a8566ea66e81765ef8566e6b716ab5b bda1bb57f0198e711c3018417513237b9533cfe2e5856ada5383f7461090f40a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1abe4f62-70d8-471a-89fc-79dd854e637c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10955
x-amzn-requestid: efabf5fa-f031-4249-8a2c-01dd55c11d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8JuxFj5oAMFvSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b232b-1a6f713b0674035c1a1b925a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:05:15 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: DLb4iXB5DlHVAliRxEaxufYLLVzNI44YLc7WqL0D5B062j53nTKo9A==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 13:42:52 GMT
age: 61516
etag: "9be5a5497a8566ea66e81765ef8566e6b716ab5b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg | 34.120.237.76 | 200 OK | 2.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash66d06d3cac1784e4ce6c8c89c300f10a 41ef94d198bbf98185eb332a3b6934c3c26c3afc 55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2351
x-amzn-requestid: 141bbf99-5d78-4b9c-a537-491718aee68a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b43YGE_SoAMFlbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d29a-00017cd344caea2b6408aeb3;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:09:14 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 1-8WM-7tNqakPDW9-K0GVbOKdotndEXj2QeJzw3cJol-g9TT5IVyOQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 16:45:53 GMT
age: 50535
etag: "41ef94d198bbf98185eb332a3b6934c3c26c3afc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4abf25d4a15ce58edadd54994b3434a2 18800e21d05596f7b64213072dee7dda5c1faf61 633138e70f43e2be9cc447967044c4070bfc4d9285e5228361bebe255dc286e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10950
x-amzn-requestid: 9bb73841-83d9-48b2-8c79-f00a57612b4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFNstFeZoAMFopQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec31d-4e6aafd367c7740c77df133b;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:04:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Flw9EdzENUCOukD9HilOxntWCGlJbRReExn8Wb6p7bIUx8iSeIg1xg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:43:51 GMT
age: 83057
etag: "18800e21d05596f7b64213072dee7dda5c1faf61"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699 | 54.230.111.113 | 200 OK | 0 B |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699 IP54.230.111.113:0
GET /1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699 HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
date: Thu, 24 Nov 2022 09:18:52 GMT
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
etag: W/"93a654317d29bb0bfd33ec5325574be0"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oFr_pPQQx4SvT4RRBa-_Hc1Z3wcBYX6YfYNewUOus9uz3UDRCxLxOw==
age: 77355
X-Firefox-Spdy: h2
|
|
| officialprizes.xyz/1/prizewheel/iphone13/fr-mg/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 | 54.230.111.113 | 200 OK | 0 B |
URL HTTP/2officialprizes.xyz/1/prizewheel/iphone13/fr-mg/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 IP54.230.111.113:0
GET /1/prizewheel/iphone13/fr-mg/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1
Host: officialprizes.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/1/prizewheel/iphone13/fr-mg/index.html?brand=Desktop&domain=clickwinner.icu&cep=U0TMQzHefxiFxPs3sQ1OmoQ9PjhtuL-LmkVUpKjv8tBdOPvC0E0m089rxk0JXeo-4m5MvkFJepoTyah9w84R2ysUwTxEry1Pc_CAbRTq0-4aV15agog1SFRKIl0TgmAC32mc-N8-eAzMutZGXvVRVPB_I-e8IBotkHypV-F_BRu1nE_RAqiJCI-7-3HcKGmDGQHKqTUpho6JZ4JZDdERzaHzybRkOAuvCqnSzup3SWi_03afBt-0dlUyx8Rz10l3k4O3JiRF_Mn3mmD9vkWCAbHDupqkrXaSPf6IgEhezUV5xLtyA-nYjScLmCh_B68IMjQgbPs-lVeYkNooHLc5cH_7mHVG8BNvPMvEj7vpaB0&lptoken=16796952360f06e68699
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 24 Nov 2022 09:02:56 GMT
last-modified: Fri, 04 Nov 2022 11:05:20 GMT
etag: W/"cd41123a11e97e0f2444b57d180631a0"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fwZkkqznIF3LDsgzzDGwkDyvSj2gHu8gTDgYFVbPzAQ76L8rttg0-Q==
age: 78312
X-Firefox-Spdy: h2
|
|
| desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js | 139.45.197.250 | 200 OK | 0 B |
URL HTTP/2desekansr.com/pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js IP139.45.197.250:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pfe/current/micro.tag.min.js?z=5378963&sw=/sw-check-permissions-f40a4.js HTTP/1.1
Host: desekansr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://officialprizes.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 06:48:07 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-12fca"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|