| braokeextrefore.com/1701bb13-5cf5-4c00-a9f6-2c9ff302d76c |  3.124.99.72 | 302 | 0 B |
URL HTTP/1.1braokeextrefore.com/1701bb13-5cf5-4c00-a9f6-2c9ff302d76c IP3.124.99.72:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /1701bb13-5cf5-4c00-a9f6-2c9ff302d76c HTTP/1.1
Host: braokeextrefore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Fri, 27 Jan 2023 06:11:57 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Pragma: no-cache
Set-Cookie: 1701bb13-5cf5-4c00-a9f6-2c9ff302d76c-v4=HKNxNq4t_xKEdk1_1Ly4DxH98KkprXN9lZARwc0WmCE; Max-Age=86400; Expires=Sat, 28-Jan-2023 06:11:57 GMT; Domain=braokeextrefore.com; Path=/; HttpOnly
cep-v4=AL8j9S767VecbGDHLsu_S6wEYZV78N7TqZFnK-e6NCxd-yv6NI34pptuzHwWxRtBD2vG7MV03bLfxZllVXwKJkUNhne8X5oTJZS6cI0uTkhmig6F8OAsdujO0OlUriI7A-5d7jC_kpPQN3q3QdyepEnhIxjkgQfJXZJhHPQDDPMSsNJyjFxtMdO7abUO6LI3p2fb3bf-jA1KsVlGz_QsPkaKLPXoHn2KviegRUn60Mhd5jWJA74zNgVbMtj6UnRx036c5gLxgSPvSgGE_S6RCyqf4PP9wNYMCro_yCcK_KHquEFtAs4zeXyV1FlbesEF60boxTnCGVmPpmah5BYhIxZ0jYG3xdcq3QLQS6fXLkWh2WQfSMj_Tj1PAWSNVeky; Max-Age=86400; Expires=Sat, 28-Jan-2023 06:11:57 GMT; Domain=braokeextrefore.com; Path=/; HttpOnly
|
|
| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash5fe582397f3003b225cb9058e02c2190 68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f 238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10009
Expires: Fri, 27 Jan 2023 08:58:46 GMT
Date: Fri, 27 Jan 2023 06:11:57 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2405562765b49b2782ebd2e2994851d5 be7ac8e558f7875bb1fb86ab5ec674424a5ff269 422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9822
Expires: Fri, 27 Jan 2023 08:55:39 GMT
Date: Fri, 27 Jan 2023 06:11:57 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 05:35:19 GMT
content-type: application/json
age: 2198
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash69f73ac59327cd9ad7d99816ccfcc03e c54844f82dbee0d5ee4c8ce344eb0139373e6c6b e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16360
Expires: Fri, 27 Jan 2023 10:44:37 GMT
Date: Fri, 27 Jan 2023 06:11:57 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: R4M2iZCJ7lnB/rwLWQTH6vgDzSib0l4/MXwWOBrnJM/Zi1Q7fbS8LULuyOr5dSFmhyAVCH1YkXo=
x-amz-request-id: YZ2KFCAZ3BDXEJBV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 05:20:24 GMT
age: 3093
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 06:11:57 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 54.230.245.39 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP54.230.245.39:0
Hashf5eb04d77095866de5773674435b9fa6 0ddea42c42223363b40cf0fee82abb40d8fe2252 fef4df903b475679bc961c4e89078e21b354cd0d94bf58af82999b2e9a8b7077
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=137200
Date: Fri, 27 Jan 2023 06:11:57 GMT
Etag: "63d2e01d-1d7"
Expires: Sat, 28 Jan 2023 20:18:37 GMT
Last-Modified: Thu, 26 Jan 2023 20:18:37 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 73TjLS4R7bECqzpBud-O6Pf8ygBAXh1SD2GyMQe8OnQtaYrNy-QmKg==
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/flag.png | 54.230.111.7 | 200 OK | 250 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/flag.png IP54.230.111.7:0
File typePNG image data, 50 x 25, 8-bit/color RGBA, non-interlaced\012- data Hashd4923d9d533d7b819ec5143f8a2e7f10 761b4e91119a94dd68b196799c12d7e90e554a64 cd3d0a5dcb26e4f8729c8b79eff80195b0720881b45ddd1f1f62a108e28f5cdf
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/flag.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 250
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:18:32 GMT
etag: "d4923d9d533d7b819ec5143f8a2e7f10"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CzwhSZ52kZIqu_oKSuW_MZfiRQcK5g_UxNmEe5AfhVvu8F3CFW_aHw==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.png | 54.230.111.7 | 200 OK | 3.8 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.png IP54.230.111.7:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 82x116, components 3\012- data Hashf63f5f70fcb07519a5008b64b208f6bf eac1642abf2967754585b88d7a3da3deaeb84a20 217ad1a4b0f73761f28086e0a0b5e7cc098474eaa83c0732e01eb33316b75030
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3770
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:45 GMT
etag: "f63f5f70fcb07519a5008b64b208f6bf"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: b2iOEVVgt7UEVIwh6hAsBYZ8-joot1y9av8Gwfdn2vHCRcnBSQN4vg==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/pw_ix.png | 54.230.111.7 | 200 OK | 117 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/pw_ix.png IP54.230.111.7:0
File typePNG image data, 502 x 502, 8-bit/color RGBA, non-interlaced\012- data Size117 kB (116858 bytes) Hashd43fde05ae0717361faaa6520a8cce7f 846043a1567c2ca9878824f221cc174a71d177cc 349c952851c8a464e3364ce23cf6a6ee92d98ffa64e4da5859120175e14ac39b
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/pw_ix.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 116858
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:57 GMT
etag: "d43fde05ae0717361faaa6520a8cce7f"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z1ElfqAR6aZSzsLVE8IrIubSueActpPVzrfVn1325S7GkLfU_7MjJQ==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.jpeg | 54.230.111.7 | 200 OK | 3.8 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.jpeg IP54.230.111.7:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 82x116, components 3\012- data Hashf63f5f70fcb07519a5008b64b208f6bf eac1642abf2967754585b88d7a3da3deaeb84a20 217ad1a4b0f73761f28086e0a0b5e7cc098474eaa83c0732e01eb33316b75030
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/iox.jpeg HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3770
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:43 GMT
etag: "f63f5f70fcb07519a5008b64b208f6bf"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5gZAf4bPOzga40QrqTUZpTrRsuZZbUhBX-I5MnVrN6y9bu8HTrWiJg==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/ix-g.png | 54.230.111.7 | 200 OK | 16 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/ix-g.png IP54.230.111.7:0
File typePNG image data, 71 x 120, 8-bit/color RGBA, non-interlaced\012- data Hash60b9ad5e285cd3f1acdd3421f221988b 02dbabf1450da1eb4ef7ed2d5525f9f1f53e4aa2 d862a29baa861ea1b4aa89b9574ed1d0928a324947eeca509604d91524bb7f53
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/ix-g.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 16034
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:46 GMT
etag: "60b9ad5e285cd3f1acdd3421f221988b"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Gtg-JLQacLFiN6lfyzIgdMCnb1bCrR1ucj_Yl6B3DH6_ukptn6A1Gw==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/io-s.jpeg | 54.230.111.7 | 200 OK | 3.8 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/io-s.jpeg IP54.230.111.7:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 82x116, components 3\012- data Hashf63f5f70fcb07519a5008b64b208f6bf eac1642abf2967754585b88d7a3da3deaeb84a20 217ad1a4b0f73761f28086e0a0b5e7cc098474eaa83c0732e01eb33316b75030
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/io-s.jpeg HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3770
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:40 GMT
etag: "f63f5f70fcb07519a5008b64b208f6bf"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GrT0bwfMuJJHxtfFIqLQQG29vs8JPoxHoh6VGOGmQdVzLEMIgHcMIQ==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_1.jpeg | 54.230.111.7 | 200 OK | 1.3 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_1.jpeg IP54.230.111.7:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hash2aa0d43e70d60d76ac4bdff139f8c7cb d7e3433297ad90f5d99249aee29b645265c9f3eb e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_1.jpeg HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1293
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:50 GMT
etag: "2aa0d43e70d60d76ac4bdff139f8c7cb"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uE1Z9Rop_7KP_eW-SxREpD_Q6MkWw-YnhiohENOflHmzIYx7ggwFkQ==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_2.jpeg | 54.230.111.7 | 200 OK | 1.2 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_2.jpeg IP54.230.111.7:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hashf9299c2023539a8f27a6e1b12ed260e5 046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2 ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/like_user_2.jpeg HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1216
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:51 GMT
etag: "f9299c2023539a8f27a6e1b12ed260e5"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N8M-Su64au_dbnsoSlXqr2sq0wBxSQXB8s5Wih9iYMVRed0a_fltHw==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/2.png | 54.230.111.7 | 200 OK | 7.5 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/2.png IP54.230.111.7:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hashda7cc2998a21ddf7130c735969273324 4f6dda472cf0032b8f74af36ae92ab72508eba89 d999601d6133555fae4bec88f1c74611764d1b96e2d21b69bd0e9334bbfa8f83
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/2.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7535
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:18:21 GMT
etag: "da7cc2998a21ddf7130c735969273324"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: duHghAinni5WsshRItJWEyQdLseqM7aYUrNFijH0cpPtaOv8JGaaNw==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/7.png | 54.230.111.7 | 200 OK | 9.3 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/7.png IP54.230.111.7:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hasha710a588b037577ed57124e3470e083e c45e56c9694b7cbd30bb5e28952be5afc4ded802 76cde0a0c13f4b36c10234d3ed83aafe81e3ab44ef7b70d4eb11824aad9b093e
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/7.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9323
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:18:25 GMT
etag: "a710a588b037577ed57124e3470e083e"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: anSqveKoqk0g-uf7GJF30fhR3ytABN3oaFf7E0bJK0H8ozKQqGnoMw==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/3.png | 54.230.111.7 | 200 OK | 6.5 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/3.png IP54.230.111.7:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash00fa0b32cc38f2a210cca7c65da1e096 45bc9e601d66f6345a6663b4ae73eeed0bf096c4 caba0ba1250cf009bcd7ea9e4bd5a0cce301e42188097c168657360eb5e31a0c
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/3.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 6499
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:18:22 GMT
etag: "00fa0b32cc38f2a210cca7c65da1e096"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LVXXzEiRz2X7INakpV7JSVoOap1W1aKJ-GF2hIbFAmdSaIi35uQL7Q==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/4.png | 54.230.111.7 | 200 OK | 5.9 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/4.png IP54.230.111.7:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash3155fa2791143fb66e0f95eba65c3839 3f6ae8be8c0f15000eeb695db68032784af26a17 331491402695a705f84b26a92a991c9502546d038e2ab40f23b2e0880d159c34
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/4.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5885
date: Thu, 26 Jan 2023 10:37:09 GMT
last-modified: Mon, 03 Oct 2022 07:18:23 GMT
etag: "3155fa2791143fb66e0f95eba65c3839"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qtr_9dt2Idh7y-pStzQOPYSvEX6xKq02n9mt_kCkv8NDvxPEL2qUpw==
age: 70490
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/1.png | 54.230.111.7 | 200 OK | 5.9 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/1.png IP54.230.111.7:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash0c5129c6988d22f21226689ed8668cbe 045298cf2182ac48ff17ac2d43c5c607735dc62e a9ae4b9516a1f4eca4b570a4f0c5d61edfc8fc293c64cb6d8753b1d29128cd5e
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/1.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5927
date: Thu, 26 Jan 2023 10:37:09 GMT
last-modified: Mon, 03 Oct 2022 07:18:20 GMT
etag: "0c5129c6988d22f21226689ed8668cbe"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7PQ_MHsn-2MeVJdf55Gayu8LUCOWqHHi7FTFXSH8PqTaIPMxWcLIZg==
age: 70490
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/6.png | 54.230.111.7 | 200 OK | 7.7 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/6.png IP54.230.111.7:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash449afc170798e48c606a73248108eef2 54b3f86bc09bf2510cbe281fef9d740e33a7cf87 afd0faf40e0380547aca02ff42c595e02e4fa260f4cc03fecc53189a5e09528e
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/6.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 7699
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:18:24 GMT
etag: "449afc170798e48c606a73248108eef2"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B2oX39zzeGOOOhAvD_hFQva_bTnnTJZ-B2mP87kbUiz-WYrQ-fUjUg==
age: 70490
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/8.png | 54.230.111.7 | 200 OK | 10 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/8.png IP54.230.111.7:0
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Hash9747b31d04a0789d324770bdf9fc8e68 b5df303236ba0ac386629beec8e861635d6d5fc8 db8f36b502796126356b0af088ab3a6f2ed84d42006617ca23e949928cb3d3a4
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/8.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 10041
date: Thu, 26 Jan 2023 10:37:09 GMT
last-modified: Mon, 03 Oct 2022 07:18:26 GMT
etag: "9747b31d04a0789d324770bdf9fc8e68"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _5-iI_ImxtsHFpmSAKDzUgXTu5E9_wbe1L9xv_ka9mXYurPIkMK8gg==
age: 70490
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/clip_footer_3.png | 54.230.111.7 | 200 OK | 2.5 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/clip_footer_3.png IP54.230.111.7:0
File typePNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data Hashe1b626392882cc25b4d891afaa68afd4 454d7abdbc2548d04feb95436ea0ab4126b4f00b ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/clip_footer_3.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2460
date: Thu, 26 Jan 2023 10:37:09 GMT
last-modified: Mon, 03 Oct 2022 07:18:29 GMT
etag: "e1b626392882cc25b4d891afaa68afd4"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4RlfGtmHtgNhGFFjYyrScY4fLK_pLzPzISaLBHe3ol1cGIUzh6lWZg==
age: 70490
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/footer_right.png | 54.230.111.7 | 200 OK | 4.9 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/footer_right.png IP54.230.111.7:0
File typePNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data Hash0e786b7344ac0b63609290a3a415fc4f c2e77827e895aaa13522f1c5c0ef79d4caef0bb2 f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/footer_right.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4919
date: Thu, 26 Jan 2023 10:37:09 GMT
last-modified: Mon, 03 Oct 2022 07:18:32 GMT
etag: "0e786b7344ac0b63609290a3a415fc4f"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yjElMi5-i5QmmzHds8yRC8EWlbpmhELlNk0GZS2I-TuhxEfeDQqMMQ==
age: 70490
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/menu_2x.png | 54.230.111.7 | 200 OK | 124 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/menu_2x.png IP54.230.111.7:0
File typePNG image data, 40 x 36, 8-bit gray+alpha, non-interlaced\012- data Hash8f68efd9388ccd80b43759b2ed542305 9f2cf96efe3bdec2ab64bc51856619cc02958fe6 455b82fa1e54fc88fe0699eabecb02155f1d6228e0ae3d7f72e1abe92dae8f3c
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/menu_2x.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 124
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:55 GMT
etag: "8f68efd9388ccd80b43759b2ed542305"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: L6PJBzHlQ9GkXJJt7jNvsuZzmYVCcjLhmEImE4VT6H6y8iyKtgPmJA==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/notify_2x.png | 54.230.111.7 | 200 OK | 229 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/notify_2x.png IP54.230.111.7:0
File typePNG image data, 36 x 32, 8-bit gray+alpha, non-interlaced\012- data Hash988234626ae7a880ed9c6a92f6336c0f 173967c2b59baed4a06997d874aba32ab65da201 4566dd8f59a09f51415a7c8955f48f75298522fc6db554bc1a59ad79c3e3e314
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/notify_2x.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 229
date: Thu, 26 Jan 2023 10:37:08 GMT
last-modified: Mon, 03 Oct 2022 07:17:56 GMT
etag: "988234626ae7a880ed9c6a92f6336c0f"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KHFfKWUKkzj2CapHENwkY4m1QZPxRiDbGyFptlsVIv5BJ7p7KHoybw==
age: 70491
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/spin_prize2.png | 54.230.111.7 | 200 OK | 2.8 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/spin_prize2.png IP54.230.111.7:0
File typePNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data Hashf278c8d30fc51b72e0774b9ecb49214c 03b574db82b31ee5758eb5093fda8ea25d1b00d8 43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/spin_prize2.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2814
date: Thu, 26 Jan 2023 10:37:09 GMT
last-modified: Mon, 03 Oct 2022 07:17:58 GMT
etag: "f278c8d30fc51b72e0774b9ecb49214c"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: I_S22WO_X4BtO18SNuUCNJEpZNOWmLOOSc8oRA5_0c0EqBTau4sm-g==
age: 70490
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/action_icons_20px_2x.png | 54.230.111.7 | 200 OK | 1.7 kB |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/action_icons_20px_2x.png IP54.230.111.7:0
File typePNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data Hashb699975b5fe73b087e711a33ff24ee1e 0e33cc5c32a5e7d18440751e3946076664caaf53 4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/action_icons_20px_2x.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1726
date: Thu, 26 Jan 2023 10:37:09 GMT
last-modified: Mon, 03 Oct 2022 07:18:27 GMT
etag: "b699975b5fe73b087e711a33ff24ee1e"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oQkE0setY92djmw0DAC2vxF8BqiAaijEBzbhv__p3hD2WlTAnH-HMQ==
age: 70490
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/comment_action_2x.png | 54.230.111.7 | 200 OK | 641 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/comment_action_2x.png IP54.230.111.7:0
File typePNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data Hashe9b3872b3e63e19728176d45f0aa6986 b638f89d5d80c4cd65327da973c52f778e30bd55 a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/comment_action_2x.png HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 641
date: Thu, 26 Jan 2023 10:37:09 GMT
last-modified: Mon, 03 Oct 2022 07:18:30 GMT
etag: "e9b3872b3e63e19728176d45f0aa6986"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DgmHbTQHckDPtDSv0RvhLcrKsNZXv_DDjewLw2xrkBiCSh_eO8nkbg==
age: 70490
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 05:41:40 GMT
age: 1818
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash1e2970e1480a4759282d63bb213051e4 ed5194d4d25dfc199821129be5d74be0ce49197d 18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9040
Expires: Fri, 27 Jan 2023 08:42:38 GMT
Date: Fri, 27 Jan 2023 06:11:58 GMT
Connection: keep-alive
|
|
| hop.greenbluefrog.click/js/pub.min.js | 108.178.23.115 | 200 OK | 1.5 kB |
URL HTTP/2hop.greenbluefrog.click/js/pub.min.js IP108.178.23.115:0
File typeASCII text, with very long lines (2752) Hash31c303586c1b78e33984bd252b8e2644 8083e2aad4cbf8242a4e6fb53657d49552b85f82 d2c713c2734353dc0ef2896d057021e9b04f35bb7c851d920d390941769c66be
GET /js/pub.min.js HTTP/1.1
Host: hop.greenbluefrog.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 06:11:58 GMT
content-type: application/javascript
content-length: 1482
last-modified: Fri, 09 Sep 2022 11:46:08 GMT
vary: Accept-Encoding
etag: "631b2780-5ca"
content-encoding: gzip
expires: Sat, 28 Jan 2023 06:11:58 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.33.66.202 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.33.66.202:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: l7xtnPxiDLLW9x2qPlhIeQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZDf0veoVnk+7KcZ7BH8VIG4B+u8=
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16057
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 06:12:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16057
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 06:12:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16057
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 06:12:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16057
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 06:12:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16057
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 06:12:00 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb7a0759c043594fbe85af422b59b8227 a05cfaad16078f42218dae233da38f6f5dff8487 e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 23:01:22 GMT
age: 25838
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde58379f-114f-469a-b64a-4c60841b1a18.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde58379f-114f-469a-b64a-4c60841b1a18.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf4b88ea6f29f683c4b46a7487fce35a5 fa64e1287967459f665d337865a2333b4fdc4c33 f0290a9132b343d91426385e31c61cad787b5e82878b5015c13d4c356e387787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde58379f-114f-469a-b64a-4c60841b1a18.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5703
x-amzn-requestid: 39b3ba3a-d049-4555-a04a-e3d55b90478f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1d1F8nIAMFTEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c58-2dc0f52e71e822f71fed1456;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Llt0BnmCEL0H6v4DHYktatbn7H8KeQhNW0AXkP_EOxOmjx8aQuMdiA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 04:45:35 GMT
age: 5185
etag: "fa64e1287967459f665d337865a2333b4fdc4c33"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33883a9-7857-4110-892f-73f67db692bc.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33883a9-7857-4110-892f-73f67db692bc.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha85badd84c0542610b94f22c4f265511 5b490095b5e02d9fef4b762888353998b645dfc9 23d6d9848caf36f0556438c371f112b40dcbf9b08b8b27bd37d4d73960c701c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd33883a9-7857-4110-892f-73f67db692bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9482
x-amzn-requestid: 825c5e6b-8fda-445e-9ed3-f5d634943c00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIZd0HqkIAMFn7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ccd5f1-2b31fe3001a1b04a406ff7ff;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 06:21:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CLTiEOu21gcngjMAN7EcwiAVeXsOYrTqwKr-puh4Cq9W51bI4WivVQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 05:22:53 GMT
age: 2947
etag: "5b490095b5e02d9fef4b762888353998b645dfc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg | 34.120.237.76 | 200 OK | 4.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash464592dade1d7207d58b22d5d09d9254 3caa2537edfe4c738540884b3eda51e437d26f4d c0cdec94ff460c4b875657bb53ed90ef2ef786a2b8095d1ebf09365556536375
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4627
x-amzn-requestid: 38f2ed09-3a2e-4b5d-bde9-24fd7467d1a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1ZJE-BIAMFvdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c3a-4ad90b1c2883444f547b6f84;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ErJ6DOjDOIMHxXIoZ2ds8Fts1RbThjP5X2qRvr6vNt6iNVeOVpQcUw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 04:25:36 GMT
age: 6384
etag: "3caa2537edfe4c738540884b3eda51e437d26f4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash02c8d9f27e0d17c38a55da6699dfb96e 6804d00e292afc0b7aadb08b11e7650488dacaa2 1ce3b93f1348649ddca495022525daf6d760823edd67bb9e506c7ee031a849b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7973
x-amzn-requestid: acaa2abf-9789-4953-b3ab-98064a9a0137
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fXrXvHvBIAMFkQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2f297-2dc2c04e2a491b3f7f5e8370;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 21:37:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Dw4ycOqAZkaeJgMvGEOlqphQjDZVO5umrvlSh_Gnx9i_6saWVl8dLw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:47:56 GMT
age: 30244
etag: "6804d00e292afc0b7aadb08b11e7650488dacaa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23169a26-33f3-4f92-9612-02bf2555d37c.jpeg | 34.120.237.76 | 200 OK | 5.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23169a26-33f3-4f92-9612-02bf2555d37c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7d2506ac511dfbea29e29ab14ba10f85 b2e2972ffa82b103c62ffde0fca99454e12d95e6 fbe6f833114208d84033ba691a74da18d641e38f0f327c752333a339f1baae34
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23169a26-33f3-4f92-9612-02bf2555d37c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5263
x-amzn-requestid: ea2f25ff-f62a-4850-a9d1-72f26d817faf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLzOkGtWoAMFV0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce325d-39e5ed054ead447d3cedf047;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:08:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BcMB1y0etnIGvZr54EllkdEOlahZGTjgrw2-3FYu3WET2f5lDLV1dw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:24:02 GMT
age: 31678
etag: "b2e2972ffa82b103c62ffde0fca99454e12d95e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sw.js?v=1674799925762 | 54.230.111.7 | 200 OK | 55 B |
URL HTTP/2www.better-luck.xyz/sw.js?v=1674799925762 IP54.230.111.7:0
File typeASCII text, with no line terminators Hash26f6b690be52718039148d66237935c9 c37b26ac420dccfb6ca1e6829d9a81caad399ba5 30160e59ded9cd7035b13f61d711bb9523fc6b03f68f51d7f42f429d7be11775
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sw.js?v=1674799925762 HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 55
last-modified: Mon, 12 Sep 2022 05:33:08 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 26 Jan 2023 09:22:22 GMT
etag: "26f6b690be52718039148d66237935c9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kcKX3th5EHG9uGs24rR44REqCaZ_5V_k2t7F10SB4Q1v73mEq3TVZg==
age: 74984
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774 | 54.230.111.7 | 200 OK | 0 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774 IP54.230.111.7:0
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774 HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
last-modified: Mon, 03 Oct 2022 07:18:34 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 27 Jan 2023 06:11:57 GMT
etag: W/"20c26abb54e3a3a9992598ac67212099"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RFVGexCX2dE9QsRKjlueqvjKZoZ6DPcqvS1GXY3GD7O64l7ZIkDAlw==
age: 86
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css | 54.230.111.7 | 200 OK | 0 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css IP54.230.111.7:0
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/style.css HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Thu, 26 Jan 2023 06:39:09 GMT
last-modified: Mon, 03 Oct 2022 07:17:59 GMT
etag: W/"8c24a5cb4c55b9d6cd3029f5fd2c6fe7"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: luH5xDLQO4QkQuugTJ-7Jh9s5a1cev8lmbybVUzuPQ3wZE5rt6dFrg==
age: 84770
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/main_script.js | 54.230.111.7 | 200 OK | 0 B |
URL HTTP/2www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/main_script.js IP54.230.111.7:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /sweeps/giftcard/EN/GC-EN-SpinnerFlag/main_script.js HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 07:17:53 GMT
server: AmazonS3
content-encoding: br
date: Fri, 27 Jan 2023 06:11:58 GMT
etag: W/"dc9a27d01c1e53204a61a4a78b5bec2a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: E9GyHTu4ULxuy-d8m_Iyaz1eLO6KPxEPZnd8bEu7mXxPNfofcyo1OQ==
age: 25223
X-Firefox-Spdy: h2
|
|
| www.better-luck.xyz/favicon.ico | 54.230.111.7 | 403 Forbidden | 0 B |
URL HTTP/2www.better-luck.xyz/favicon.ico IP54.230.111.7:0
GET /favicon.ico HTTP/1.1
Host: www.better-luck.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.better-luck.xyz/sweeps/giftcard/EN/GC-EN-SpinnerFlag/index.html?cep=iBw45BfIDC_BAYnzxo2u8OAi7nUoDHVY7UaPGkOJHOjswgZIsGhZFJSbryOvgh93n3P6bKMGfBTnuA5qYTv_8_ZmqvlHk7xDax-mpRM7vtYm1nixXdyS7dHvcpdrVlugVTGmK9WZHctfHdXmSQR2FKtFosz_Orv4HsX8DuxI_uwdubsIKKU5JeisXQCssh0E_HSwaRbpJGre_r2vv_VKUGOFUUPp8zMb1cxsC1b0dixjD7I3eFf4GJvlbeD1PuR2Q4KmXv1kgmZRIoEnJIg9LhrEXY-Vd_gAMKa7wYkxnBObGAlzQI8CapO_LlKeGqi_b5CFHmNm5WpfF0Kk1w5qMvYO5uD6M8K4iT63fJIpMk-WGN5Kd2QOgTESyig6g-mO&lptoken=164f74a580ef17601774
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
content-type: application/xml
date: Fri, 27 Jan 2023 06:11:57 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lta3tkPl9xN597gQNwHvhEaSC6q4yQJxinTNGHG4crJ241W6nzwJPQ==
X-Firefox-Spdy: h2
|
|