Report - egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0

Report Overview

Visited public
2024-11-05 03:26:27
Tags
URL
egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0
Finishing URL
egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0
IP / ASN
52.24.80.158
#16509 AMAZON-02
Title
activationspot.com

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-10-30	512 B	1.2 kB	35.244.181.201
egift.activationspot.com	242841	2009-10-02	2015-01-16	2024-10-22	2.0 kB	5.3 kB	52.24.80.158
ct.captcha-delivery.com	42546	2019-12-23	2020-02-05	2024-10-30	411 B	12 kB	108.157.214.69
geo.captcha-delivery.com	43337	2019-12-23	2020-03-18	2024-10-30	3.3 kB	304 kB	13.50.216.15
static.captcha-delivery.com	38537	2019-12-23	2020-05-12	2024-10-30	3.0 kB	59 kB	108.157.214.69
dd.prod.captcha-delivery.com	unknown	2019-12-23	2022-04-28	2024-10-30	1.1 kB	24 kB	54.240.174.72

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir	ScriptElement	2.5 kB	2024-10-14	2025-06-19
Pretty URL geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir IP 13.50.216.15 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-10-14 17:55 Last Seen2025-06-19 12:30 Times Seen17 Hash 3e74049fdfa6b855fdded9ac110e60c7 7f4d3995c0106b3a2606548a50d79541c6f95a8e 526a2a7cbf8bd167829bb35e3158b9c387283ec3dd9a8379842fc1b8a374bf01 Loading...

	geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir	ScriptElement	591 kB	2024-11-05	2024-11-05
Pretty URL geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir IP 13.50.216.15 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-11-05 03:26 Last Seen2024-11-05 03:26 Times Seen1 Hash d82a0d34ffd927a08a7fae2b61a9aebe 71395e89a511b85cff042b816ae2bf346a2fec04 9c18310cdd359097d2388988e587d87f94a6a5dfcfbecfb30d5a05f9083e03a0 Loading...

	egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0	ScriptElement	293 B	2024-11-05	2024-11-05
Pretty URL egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 IP 52.24.80.158 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-11-05 03:26 Last Seen2024-11-05 03:26 Times Seen1 Hash 932e08bd217f9768f1b84c9cbf952f00 71e04dabcf75249bc780fd54ca6e3a822577914c 52afaa6b5b4f54868e6d59eebe2bfbc0daaa52e95319641ee8f4b2e3b3c21d6e Loading...

	ct.captcha-delivery.com/i.js	ScriptElement	12 kB	2024-10-14	2024-11-05
Pretty URL ct.captcha-delivery.com/i.js IP 108.157.214.69 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-10-14 17:55 Last Seen2024-11-05 03:26 Times Seen4 Hash 8b898d745a5fbaa85495dd266ff215e7 72bd07a64e0bc3f9386d3f9d481154e70a3e4567 e861b576d414f9f4a951f45a15a0ad5949aefe0380229ba2b7c04877ff068dc8 Loading...

HTTP Transactions (16)

	URL	IP	Response	Size
	GET egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0	52.24.80.158	403 Forbidden	660 B
URL User Request GET HTTP/2 egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 IP 52.24.80.158:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectegift.blackhawknetwork.com FingerprintFC:AB:16:B2:90:82:1E:B0:E7:3B:C1:CC:1E:25:4B:85:DA:B3:A5:B4 ValidityMon, 12 Aug 2024 00:00:00 GMT - Wed, 10 Sep 2025 23:59:59 GMT File type HTML document, ASCII text, with very long lines (660), with no line terminators Size 660 B (660 bytes) Hash 913405cca375f6f4c93654a531e704ef d31f01f054f6aa5a9c20708a94c02f2de27ee14a 507cb8e9ce4272eae95a132b05f564065d2f5ff9994cf05c5e4ea263284800a6 HTTP Headers GET /egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 HTTP/1.1 Host: egift.activationspot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 403 Forbidden date: Tue, 05 Nov 2024 03:26:03 GMT content-type: text/html;charset=utf-8 content-length: 660 server: Apache x-datadome: protected accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory charset: utf-8 cache-control: max-age=0, private, no-cache, no-store, must-revalidate pragma: no-cache access-control-allow-credentials: true access-control-expose-headers: x-dd-b, x-set-cookie access-control-allow-origin: * x-datadome-cid: AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg== x-dd-b: 3 set-cookie: datadome=x2P_XkrtIk8Wr5wMJZ~Jqpe_NcFBEVFJCvhicGJRHhWihPmrvJyJ9jTcAcagoEdknZ6maew12N5YHXZlRtLJpTnKBMOIVFCuaKLVVrauEp2hruV~O~1S77LfJvcW5tML; Max-Age=31536000; Domain=.activationspot.com; Path=/; Secure; SameSite=Lax strict-transport-security: max-age=63072000; includeSubdomains; preload x-content-type-options: nosniff x-robots-tag: noindex, nofollow, noarchive vary: Unique-ID X-Firefox-Spdy: h2

	GET egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0	52.24.80.158	403 Forbidden	660 B
URL User Request GET HTTP/2 egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 IP 52.24.80.158:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectegift.blackhawknetwork.com FingerprintFC:AB:16:B2:90:82:1E:B0:E7:3B:C1:CC:1E:25:4B:85:DA:B3:A5:B4 ValidityMon, 12 Aug 2024 00:00:00 GMT - Wed, 10 Sep 2025 23:59:59 GMT File type HTML document, ASCII text, with very long lines (660), with no line terminators Size 660 B (660 bytes) Hash 69ac3b2f1bfd78213d7bbe7e3babd7cb 19b2b86dad9dd9a47cdf8532d28ad33d373ab1da a8fc59e1dc4664168bc06a82372d485b829f92964593a58e4270c8adacd6cee6 HTTP Headers GET /egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 HTTP/1.1 Host: egift.activationspot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: datadome=x2P_XkrtIk8Wr5wMJZ~Jqpe_NcFBEVFJCvhicGJRHhWihPmrvJyJ9jTcAcagoEdknZ6maew12N5YHXZlRtLJpTnKBMOIVFCuaKLVVrauEp2hruV~O~1S77LfJvcW5tML Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 403 Forbidden date: Tue, 05 Nov 2024 03:26:04 GMT content-type: text/html;charset=utf-8 content-length: 660 server: Apache x-datadome: protected accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory charset: utf-8 cache-control: max-age=0, private, no-cache, no-store, must-revalidate pragma: no-cache access-control-allow-credentials: true access-control-expose-headers: x-dd-b, x-set-cookie access-control-allow-origin: * x-datadome-cid: AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg== x-dd-b: 3 set-cookie: datadome=PSTYbF8~BxvJRgnt6uk_owN5xxnc81I0t1eiZurIMFAOxyHSTkevyY0mjnp4HMjEACt~gGb18QoOvyWs00awXVg8Gc2IiWa8WiScnviERdn4A8hpi0iUufiNL8N~lRga; Max-Age=31536000; Domain=.activationspot.com; Path=/; Secure; SameSite=Lax strict-transport-security: max-age=63072000; includeSubdomains; preload x-content-type-options: nosniff x-robots-tag: noindex, nofollow, noarchive vary: Unique-ID X-Firefox-Spdy: h2

	GET ct.captcha-delivery.com/i.js	108.157.214.69	200 OK	12 kB
URL GET HTTP/2 ct.captcha-delivery.com/i.js IP 108.157.214.69:443 ASN #16509 AMAZON-02 Requested by https://egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintED:2E:83:EA:4F:B1:B5:19:99:0D:76:95:73:F3:47:D3:5D:96:73:95 ValidityThu, 25 Jul 2024 00:00:00 GMT - Fri, 22 Aug 2025 23:59:59 GMT File type JavaScript source, ASCII text Size 12 kB (11752 bytes) Hash 8b898d745a5fbaa85495dd266ff215e7 72bd07a64e0bc3f9386d3f9d481154e70a3e4567 e861b576d414f9f4a951f45a15a0ad5949aefe0380229ba2b7c04877ff068dc8 HTTP Headers `GET /i.js HTTP/1.1 Host: ct.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://egift.activationspot.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/javascript content-length: 11752 date: Mon, 04 Nov 2024 16:54:29 GMT last-modified: Thu, 10 Oct 2024 08:41:36 GMT etag: "8b898d745a5fbaa85495dd266ff215e7" x-amz-server-side-encryption: AES256 x-amz-version-id: null accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: pmRpFWy9BpAL3BKkopXDhAhPlLQD6cs8THAUuxMlwQxD-qPQRP0nxQ== age: 37896 X-Firefox-Spdy: h2

	GET geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=PSTYbF8~BxvJRgnt6uk_owN5xxnc81I0t1eiZurIMFAOxyHSTkevyY0mjnp4HMjEACt~gGb18QoOvyWs00awXVg8Gc2IiWa8WiScnviERdn4A8hpi0iUufiNL8N~lRga&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&s=48269&b=1585606&dm=cd	13.50.216.15	200 OK	101 kB
URL GET HTTP/1.1 geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=PSTYbF8~BxvJRgnt6uk_owN5xxnc81I0t1eiZurIMFAOxyHSTkevyY0mjnp4HMjEACt~gGb18QoOvyWs00awXVg8Gc2IiWa8WiScnviERdn4A8hpi0iUufiNL8N~lRga&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&s=48269&b=1585606&dm=cd IP 13.50.216.15:443 ASN #16509 AMAZON-02 Requested by https://egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint41:02:9F:4B:ED:5F:95:C1:B9:AD:2E:77:48:16:F7:B1:C7:BF:89:EE ValidityMon, 01 Jan 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (58003) Size 101 kB (101010 bytes) Hash 6b01745e88589abf1764da689a03337e 1c76cbb8e3f37a20122bbc017b80b6c194282ac6 f8a6beefbc83277190177a490a9ada34309d9b10a92e349990a7fcf24d3d1741 HTTP Headers GET /interstitial/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=PSTYbF8~BxvJRgnt6uk_owN5xxnc81I0t1eiZurIMFAOxyHSTkevyY0mjnp4HMjEACt~gGb18QoOvyWs00awXVg8Gc2IiWa8WiScnviERdn4A8hpi0iUufiNL8N~lRga&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&s=48269&b=1585606&dm=cd HTTP/1.1 Host: geo.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://egift.activationspot.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 03:26:04 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Content-Encoding: gzip`

	GET egift.activationspot.com/favicon.ico	52.24.80.158	200 OK	1.4 kB
URL GET HTTP/2 egift.activationspot.com/favicon.ico IP 52.24.80.158:443 ASN #16509 AMAZON-02 Requested by https://egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 Certificate IssuerAmazon Subjectegift.blackhawknetwork.com FingerprintFC:AB:16:B2:90:82:1E:B0:E7:3B:C1:CC:1E:25:4B:85:DA:B3:A5:B4 ValidityMon, 12 Aug 2024 00:00:00 GMT - Wed, 10 Sep 2025 23:59:59 GMT File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel Size 1.4 kB (1406 bytes) Hash 4fa2b94dec4e79282a739ddc0a240874 adaabfc0767325a271007ff0fb38078fb98198d9 2c743776965aaeb4f0718d2f25ed3ff1189652f78df9191507cad57aadb66a0a HTTP Headers GET /favicon.ico HTTP/1.1 Host: egift.activationspot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 Cookie: datadome=PSTYbF8~BxvJRgnt6uk_owN5xxnc81I0t1eiZurIMFAOxyHSTkevyY0mjnp4HMjEACt~gGb18QoOvyWs00awXVg8Gc2IiWa8WiScnviERdn4A8hpi0iUufiNL8N~lRga Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK date: Tue, 05 Nov 2024 03:26:04 GMT content-type: image/x-icon content-length: 1406 server: Apache strict-transport-security: max-age=63072000; includeSubdomains; preload x-robots-tag: noindex, nofollow, noarchive vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers last-modified: Tue, 29 Oct 2024 07:36:10 GMT accept-ranges: bytes x-content-type-options: nosniff, nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/common/fonts/roboto/font-face.css	108.157.214.69	200 OK	519 B
URL GET HTTP/2 static.captcha-delivery.com/common/fonts/roboto/font-face.css IP 108.157.214.69:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintED:2E:83:EA:4F:B1:B5:19:99:0D:76:95:73:F3:47:D3:5D:96:73:95 ValidityThu, 25 Jul 2024 00:00:00 GMT - Fri, 22 Aug 2025 23:59:59 GMT File type ASCII text Size 519 B (519 bytes) Hash e4f77074c0ffbfab377011e19283eb13 9160259165ca1ef84209d4dd675c3ed367babff1 66599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51 HTTP Headers `GET /common/fonts/roboto/font-face.css HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: text/css content-length: 519 last-modified: Fri, 19 Jul 2024 12:42:09 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 05 Nov 2024 01:40:02 GMT etag: "e4f77074c0ffbfab377011e19283eb13" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: ESQZFlkUhVX6ANKzPubiubcEytPG6aulLnIu6RmUIRFcB6512W8IWA== age: 6363 X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2	108.157.214.69	200 OK	16 kB
URL GET HTTP/2 static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 IP 108.157.214.69:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintED:2E:83:EA:4F:B1:B5:19:99:0D:76:95:73:F3:47:D3:5D:96:73:95 ValidityThu, 25 Jul 2024 00:00:00 GMT - Fri, 22 Aug 2025 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 15688, version 1.0 Size 16 kB (15688 bytes) Hash aa23b7b4bcf2b8f0e876106bb3de69c6 106ac454ba4e503e0a1cd15e1275130918049182 cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca HTTP Headers GET /common/fonts/roboto/roboto.woff2 HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://static.captcha-delivery.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff2 content-length: 15688 access-control-allow-origin: https://geo.captcha-delivery.com access-control-allow-methods: GET, HEAD access-control-max-age: 3000 access-control-allow-credentials: true last-modified: Fri, 06 May 2022 16:47:07 GMT x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 05 Nov 2024 03:18:14 GMT etag: "aa23b7b4bcf2b8f0e876106bb3de69c6" vary: Origin x-cache: Hit from cloudfront via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: jQZThIDiZ0K9F-qoBNZrnI6leKbFH1AH2tC61HKYP5hOzSXcp3eDJA== age: 472 X-Firefox-Spdy: h2

	geo.captcha-delivery.com/interstitial/	13.50.216.15	200 OK	770 B
URL geo.captcha-delivery.com/interstitial/ IP 13.50.216.15:0 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint41:02:9F:4B:ED:5F:95:C1:B9:AD:2E:77:48:16:F7:B1:C7:BF:89:EE ValidityMon, 01 Jan 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT File type JSON text data Size 770 B (770 bytes) Hash 238880ea61c201885a4ff76b2a22d120 575a320b8758bbc5913815d6ede8fe155ea5afd1 882afe2051a7d5afb5aaf8c215d0f89c93d1fb4b07e2cb8132b66c769e0193d3 HTTP Headers POST /interstitial/ HTTP/1.1 Host: geo.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Content-Length: 4838 Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=PSTYbF8~BxvJRgnt6uk_owN5xxnc81I0t1eiZurIMFAOxyHSTkevyY0mjnp4HMjEACt~gGb18QoOvyWs00awXVg8Gc2IiWa8WiScnviERdn4A8hpi0iUufiNL8N~lRga&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&s=48269&b=1585606&dm=cd Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 03:26:06 GMT Content-Type: application/json;charset=utf-8 Content-Length: 770 Connection: keep-alive`

	GET geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir	13.50.216.15	200 OK	202 kB
URL GET HTTP/1.1 geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir IP 13.50.216.15:443 ASN #16509 AMAZON-02 Requested by https://egift.activationspot.com/egift?tid=657Q0RGVTJTZKC50AW2P8STYQC&gcm=n&gs=n&gw=n&eid=LDXLJGZTNSL3BAT2KJ5CRRKHQ0 Certificate IssuerAmazon Subject.captcha-delivery.com Fingerprint41:02:9F:4B:ED:5F:95:C1:B9:AD:2E:77:48:16:F7:B1:C7:BF:89:EE ValidityMon, 01 Jan 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (39166) Size 202 kB (202013 bytes) Hash d875cac47ba8bc2ff9dd512e0238991f 4bbf15409254949e4cac1db321634f34dedf6da8 831642fb660e4a6413e76d53018e50e031b89311fb84d5d2c1755bff386863e6 HTTP Headers GET /captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir HTTP/1.1 Host: geo.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/interstitial/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg%3D%3D&hash=7B8EFDAC88F90DF2C048DADD049678&cid=PSTYbF8~BxvJRgnt6uk_owN5xxnc81I0t1eiZurIMFAOxyHSTkevyY0mjnp4HMjEACt~gGb18QoOvyWs00awXVg8Gc2IiWa8WiScnviERdn4A8hpi0iUufiNL8N~lRga&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&s=48269&b=1585606&dm=cd Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Tue, 05 Nov 2024 03:26:07 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: Content-Encoding: gzip`

	GET static.captcha-delivery.com/common/fonts/roboto/font-face.css	108.157.214.69	200 OK	519 B
URL GET HTTP/2 static.captcha-delivery.com/common/fonts/roboto/font-face.css IP 108.157.214.69:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintED:2E:83:EA:4F:B1:B5:19:99:0D:76:95:73:F3:47:D3:5D:96:73:95 ValidityThu, 25 Jul 2024 00:00:00 GMT - Fri, 22 Aug 2025 23:59:59 GMT File type ASCII text Size 519 B (519 bytes) Hash e4f77074c0ffbfab377011e19283eb13 9160259165ca1ef84209d4dd675c3ed367babff1 66599c34190f7a6a402b38664a30a9b564fc22510f51fa3c5f027fb91e7a0e51 HTTP Headers `GET /common/fonts/roboto/font-face.css HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: text/css content-length: 519 last-modified: Fri, 19 Jul 2024 12:42:09 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 05 Nov 2024 01:40:02 GMT etag: "e4f77074c0ffbfab377011e19283eb13" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: 7EIkbPcN5LthEKwZfg-HIDPLPDGsScG8l7JfiDsfc3W-0wftP3tCKA== age: 6366 X-Firefox-Spdy: h2

	GET dd.prod.captcha-delivery.com/image/2024-11-05/ce3a934d8436f7121c413b4317810e03.frag.png	54.240.174.72	200 OK	7.3 kB
URL GET HTTP/2 dd.prod.captcha-delivery.com/image/2024-11-05/ce3a934d8436f7121c413b4317810e03.frag.png IP 54.240.174.72:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir Certificate IssuerAmazon Subjectdd.prod.captcha-delivery.com Fingerprint27:E0:19:52:08:B4:4E:3E:03:D8:D4:80:80:61:BE:8A:39:D7:60:9B ValidityTue, 27 Feb 2024 00:00:00 GMT - Thu, 27 Mar 2025 23:59:59 GMT File type PNG image data, 63 x 155, 8-bit/color RGBA, non-interlaced Size 7.3 kB (7314 bytes) Hash 5311830cd89931e1c55127b6e3d4ec1d a810c61b6474bd516a0a909111bdb4e7a7865690 a404ed0172e0e5c1343842d8439e5b157b37c3be3e1bd3401815fe06607184df HTTP Headers GET /image/2024-11-05/ce3a934d8436f7121c413b4317810e03.frag.png HTTP/1.1 Host: dd.prod.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: binary/octet-stream content-length: 7314 date: Tue, 05 Nov 2024 00:01:51 GMT access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3600 last-modified: Fri, 01 Nov 2024 05:07:16 GMT x-amz-expiration: expiry-date="Sat, 09 Nov 2024 00:00:00 GMT", rule-id="auto-clean old captchas (7 days)" etag: "5311830cd89931e1c55127b6e3d4ec1d" x-amz-server-side-encryption: AES256 x-amz-version-id: v2hHoutEeM.aWEC_h8_wtIyCoZU_l46w accept-ranges: bytes server: AmazonS3 vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: -F6FGMcd3mlT33FVrGqezmaBT9wQ0kQ32ZHETpp_k0JlSUR8wW5ljA== age: 12257 x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	GET dd.prod.captcha-delivery.com/image/2024-11-05/ce3a934d8436f7121c413b4317810e03.jpg	54.240.174.72	200 OK	15 kB
URL GET HTTP/2 dd.prod.captcha-delivery.com/image/2024-11-05/ce3a934d8436f7121c413b4317810e03.jpg IP 54.240.174.72:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir Certificate IssuerAmazon Subjectdd.prod.captcha-delivery.com Fingerprint27:E0:19:52:08:B4:4E:3E:03:D8:D4:80:80:61:BE:8A:39:D7:60:9B ValidityTue, 27 Feb 2024 00:00:00 GMT - Thu, 27 Mar 2025 23:59:59 GMT File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x155, components 3 Size 15 kB (15021 bytes) Hash 00e432e42a91b909b55cc7fbfb17783f e5d8abbd0df954e84bbb20eed0a37a6c9f7ee261 f1130bec6373ae0388920ec07336654ecbc3b2259adbf242c64b318c185fb540 HTTP Headers GET /image/2024-11-05/ce3a934d8436f7121c413b4317810e03.jpg HTTP/1.1 Host: dd.prod.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: binary/octet-stream content-length: 15021 date: Tue, 05 Nov 2024 00:01:51 GMT access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3600 last-modified: Fri, 01 Nov 2024 05:07:15 GMT x-amz-expiration: expiry-date="Sat, 09 Nov 2024 00:00:00 GMT", rule-id="auto-clean old captchas (7 days)" etag: "00e432e42a91b909b55cc7fbfb17783f" x-amz-server-side-encryption: AES256 x-amz-version-id: 4NjCFwDn0cQPt6nLot8jjPp3XSoSNRtF accept-ranges: bytes server: AmazonS3 vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method x-cache: Hit from cloudfront via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: egH2gsy3tnR_L2sWibJRq-ztKX9eDXMN_ZFxZQgefFSLTCQKf_HNgQ== age: 12257 x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2

	static.captcha-delivery.com/captcha/assets/tpl/device-check/index.css	108.157.214.69	200 OK	17 kB
URL static.captcha-delivery.com/captcha/assets/tpl/device-check/index.css IP 108.157.214.69:0 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintED:2E:83:EA:4F:B1:B5:19:99:0D:76:95:73:F3:47:D3:5D:96:73:95 ValidityThu, 25 Jul 2024 00:00:00 GMT - Fri, 22 Aug 2025 23:59:59 GMT File type gzip compressed data Size 17 kB (16660 bytes) Hash 8a107e99bef8ddd06aba7bc3cf92a925 1b9bd6aaa863e015bc22d4971c33fc50e053cddb f2e1a59fc6413f2087ecffb1d6c8456ab95c0825c4ebb77862765d6ec689388d HTTP Headers `GET /captcha/assets/tpl/device-check/index.css HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK content-type: text/css last-modified: Thu, 08 Feb 2024 08:41:29 GMT content-encoding: gzip x-amz-server-side-encryption: AES256 x-amz-version-id: null server: AmazonS3 date: Mon, 04 Nov 2024 04:18:57 GMT etag: W/"d24f433ae1916185b0e4e20ed76cb64b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: 1sB_o1lD-iZPOFFIx7Eas9TK0UlCqbBLvp93kiwAuMUuVqMlVVwa_Q== age: 83228 X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/common/fonts/roboto/roboto.woff2	108.157.214.69	200 OK	16 kB
URL GET HTTP/2 static.captcha-delivery.com/common/fonts/roboto/roboto.woff2 IP 108.157.214.69:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintED:2E:83:EA:4F:B1:B5:19:99:0D:76:95:73:F3:47:D3:5D:96:73:95 ValidityThu, 25 Jul 2024 00:00:00 GMT - Fri, 22 Aug 2025 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 15688, version 1.0 Size 16 kB (15688 bytes) Hash aa23b7b4bcf2b8f0e876106bb3de69c6 106ac454ba4e503e0a1cd15e1275130918049182 cc46322d5c4d41da447f26f7fa714827f2ec9a112968c12ef5736c7494985eca HTTP Headers GET /common/fonts/roboto/roboto.woff2 HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://geo.captcha-delivery.com DNT: 1 Connection: keep-alive Referer: https://static.captcha-delivery.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK content-type: font/woff2 content-length: 15688 access-control-allow-origin: https://geo.captcha-delivery.com access-control-allow-methods: GET, HEAD access-control-max-age: 3000 access-control-allow-credentials: true last-modified: Fri, 06 May 2022 16:47:07 GMT x-amz-version-id: null accept-ranges: bytes server: AmazonS3 date: Tue, 05 Nov 2024 03:18:14 GMT etag: "aa23b7b4bcf2b8f0e876106bb3de69c6" vary: Origin x-cache: Hit from cloudfront via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: WdMFxw3BfdpDCPS8oU_PLw1jlgQwEcszwiV9mJhcbogkEKIa4aTvpA== age: 476 X-Firefox-Spdy: h2

	aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml	35.244.181.201	200 OK	444 B
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type XML 1.0 document, ASCII text, with very long lines (332) Size 444 B (444 bytes) Hash 3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463 HTTP Headers `GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1 Host: aus5.mozilla.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Cache-Control: no-cache Pragma: no-cache Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK server: nginx rule-id: unknown rule-data-version: unknown content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2024-12-12-13-36-01.chain; p384ecdsa=AwWDNo6P2iBFMN_EscHxXrJbh1MMy4_QTIoJUH5yOqSCF17f8AVQa1yufMX8Nh4yeR4x9eGZeVRVq5Q33kP1YuNSW505kjVZC2NeXNgOFSmCPCDZcSeQqOZAU2EhQhNY strict-transport-security: max-age=31536000; x-content-type-options: nosniff content-security-policy: default-src 'none'; frame-ancestors 'none' x-proxy-cache-status: EXPIRED content-encoding: gzip via: 1.1 google date: Tue, 05 Nov 2024 03:24:33 GMT content-type: text/xml; charset=utf-8 vary: Accept-Encoding content-length: 444 age: 109 cache-control: public,max-age=90 alt-svc: clear X-Firefox-Spdy: h2

	GET static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css	108.157.214.69	200 OK	6.2 kB
URL GET HTTP/2 static.captcha-delivery.com/captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css IP 108.157.214.69:443 ASN #16509 AMAZON-02 Requested by https://geo.captcha-delivery.com/captcha/?initialCid=AHrlqAAAAAMA_1HrE5Gq-RQAW1oqmg==&cid=PSTYbF8~BxvJRgnt6uk_ovHOVl8CURRfyJSDDYc1hiFqLbzuLgFyP9oEvAwLFqfxvL0Q~JFngW8CJayKTlOANqDEzJJ11VxG4D0B_TX3mrG1g9CvVQG5t2KxnJZc0rEw&referer=https%3A%2F%2Fegift.activationspot.com%2Fegift%3Ftid%3D657Q0RGVTJTZKC50AW2P8STYQC%26gcm%3Dn%26gs%3Dn%26gw%3Dn%26eid%3DLDXLJGZTNSL3BAT2KJ5CRRKHQ0&hash=7B8EFDAC88F90DF2C048DADD049678&t=fe&s=48269&e=4c2ccbe4e6dd530ba52ecb8f8c67dfb1b613cf143167871976d7e26685560ee9&ir=41%2C36&dm=dc_ir Certificate IssuerAmazon Subject.captcha-delivery.com FingerprintED:2E:83:EA:4F:B1:B5:19:99:0D:76:95:73:F3:47:D3:5D:96:73:95 ValidityThu, 25 Jul 2024 00:00:00 GMT - Fri, 22 Aug 2025 23:59:59 GMT File type ASCII text, with very long lines (6892), with no line terminators Size 6.2 kB (6162 bytes) Hash d6882e46f843cd956a4ff0cc1906170f 9cce6f420346ea6fd2f96c6f5d257f2b28d0adb6 84da6d4da68c3ac37cab4889826253a4dedd37958eb23b100a2c27f13e5626ac HTTP Headers GET /captcha/assets/tpl/6dc485c0c428c35b53577b146dc6f9179f55ef9ad41b327a2a179998839364bf/index.css HTTP/1.1 Host: static.captcha-delivery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://geo.captcha-delivery.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK content-type: text/css last-modified: Thu, 11 Apr 2024 08:21:58 GMT content-encoding: gzip x-amz-server-side-encryption: AES256 x-amz-version-id: null server: AmazonS3 date: Tue, 05 Nov 2024 01:34:33 GMT etag: W/"1f113f0b6d6855568c684e354bb853d1" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 ae2eaf89e0d81cd8867df60807612b22.cloudfront.net (CloudFront) x-amz-cf-pop: ARN56-P1 x-amz-cf-id: 9NsFLVD9izXYzQUTjKObJc2BDVVj81xb7gZO85cL0TJznhhhLTIaqg== age: 6695 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by