urlquery - report: 58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	54.148.242.254
r3.o.lencr.org (7)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2366	6203	23.36.77.32
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2374	35.241.9.150
58.winprizes658.monster (20)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	18995	127738	45.76.148.82
ocsp.digicert.com (1)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341	797	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5855	34.160.144.191
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	391	34.117.237.239
push.winprizes658.monster (1)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	381	1879	67.212.184.147
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3246	44147	34.120.237.76

Scan Date	Severity	Indicator	Comment
2022-12-12	medium	58.winprizes658.monster/engaff/js/app.js?id=0601d5f2aaa1656cef1f	Phishing
2022-12-12	medium	58.winprizes658.monster/engaff/img/fb-like.svg	Phishing
2022-12-12	medium	58.winprizes658.monster/engaff/css/landers/prizewheel-fb/app.css?id=cd41123 (...)	Phishing

Scan Date	Severity	Indicator	Comment
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed
2022-12-12	medium	winprizes658.monster	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-06-01 18:36:19 UTC	0 - 1 - 0	30.winprizes630.lol/thpp2/thpp10.html?city=Mo (...)	45.76.148.82
2023-06-01 04:21:17 UTC	0 - 1 - 0	30.winprizes630.lol/thpp2/thpp10.html?city=Mo (...)	45.76.148.82
2023-06-01 04:20:10 UTC	1 - 0 - 0	96.winprizes696.monster/br3icu/index.php?city (...)	45.76.148.82
2023-06-01 04:20:06 UTC	1 - 0 - 0	96.winprizes696.monster/br3icu/index.php?city (...)	45.76.148.82
2023-06-01 03:58:48 UTC	0 - 1 - 0	30.winprizes630.lol/thpp2/thpp10.html?city=Mo (...)	45.76.148.82

Date	UQ / IDS / BL	URL	IP
2023-06-02 01:33:28 UTC	0 - 0 - 46	sparindia.org/	65.20.75.226
2023-06-02 01:23:07 UTC	0 - 0 - 15	mt07verfy.com/	45.76.94.46
2023-06-02 00:06:59 UTC	3 - 8 - 1	11012705-next.work.gd/?pgviolationid=5dd0cd67 (...)	149.28.152.61
2023-06-01 20:48:26 UTC	0 - 1 - 0	www.etiumsoft.com/magiclines.exe	45.63.85.139
2023-06-01 20:05:35 UTC	1 - 0 - 0	85.winprizes385.monster/brnotix1/index.php?ci (...)	217.69.14.8

Date	UQ / IDS / BL	URL	IP
2023-04-28 21:19:58 UTC	0 - 0 - 24	58.winprizes658.monster/engaff/phaff2022n4.ht (...)	45.76.148.82
2023-04-26 23:23:46 UTC	0 - 0 - 23	58.winprizes658.monster/engaff/phaff2022n4.ht (...)	45.76.148.82
2023-04-26 20:04:56 UTC	0 - 0 - 23	58.winprizes658.monster/engaff/phaff2022n4.ht (...)	45.76.148.82
2023-04-20 04:03:53 UTC	0 - 0 - 24	58.winprizes658.monster/engaff/phaff2022n4.ht (...)	45.76.148.82
2023-04-19 14:37:16 UTC	0 - 0 - 24	58.winprizes658.monster/engaff/phaff2022n4.ht (...)	45.76.148.82

Date	UQ / IDS / BL	URL	IP
2023-04-04 18:56:56 UTC	0 - 0 - 5	16.winprizes716.monster/eng/phindexn3.html	45.76.148.82
2023-04-04 18:56:52 UTC	0 - 1 - 5	track.writive-resica.com/118533fe-4514-4e37-a (...)	18.195.195.71
2023-04-04 18:17:51 UTC	0 - 1 - 1	begaret-suring.icu/7bb10a54-3133-44ea-8e14-5e (...)	3.124.99.72
2023-04-04 17:56:26 UTC	0 - 0 - 4	2.winprizes702.monster/engaff2/ngaff2022n4.ht (...)	45.76.148.82
2023-04-04 14:57:46 UTC	0 - 0 - 4	58.winprizes658.monster/engaff/phaff2022n4.ht (...)	45.76.148.82

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4B7213EC107CDF1C2CD61A124453FB682EC291AF0004D071105C87E2FE7528F5" Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15029 Expires: Tue, 13 Dec 2022 02:06:57 GMT Date: Mon, 12 Dec 2022 21:56:28 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3c0c53379f331e934f61070074d41035 Sha1: 420f6e542cbf741838566f22e475a80e2f600d21 Sha256: 4b7213ec107cdf1c2cd61a124453fb682ec291af0004d071105c87e2fe7528f5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1755A645D41780A9E54EE1AD04A2B293D16D2A98E543F81835C3A66E3D58C3BE" Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7397 Expires: Mon, 12 Dec 2022 23:59:45 GMT Date: Mon, 12 Dec 2022 21:56:28 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b8fe6ec1ac390bc5b90b68b0e3005299 Sha1: 4ce20d527fcc93a2a6d1c5f3ab73ee8ded2a57f2 Sha256: 1755a645d41780a9e54ee1ad04a2b293d16d2a98e543f81835c3a66e3d58c3be
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB" Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2874 Expires: Mon, 12 Dec 2022 22:44:22 GMT Date: Mon, 12 Dec 2022 21:56:28 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dbd022fec0a71226daaf29b7563a8896 Sha1: c37d14dc7b3849a4bb815fa325fb5e70fae54039 Sha256: 22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 12 Dec 2022 21:33:43 GMT age: 1365 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: bf0c602d32b3c14606f22a86183b5e3c Sha1: 6eabd8d83475eba731968abe1a05a8bfd272f160 Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: FV32VnuvZNNKbi6dSSXAbyN3ilzEoc7624aObA2DmZENI8GvfmCDR9p5EnO26cNhZpIkFK64ElsRB8xR+ufmdA== x-amz-request-id: HZ9QF63Q0DXVTTC3 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 12 Dec 2022 21:51:39 GMT age: 289 last-modified: Wed, 30 Nov 2022 10:06:34 GMT etag: "53341dea33f4f3d9b4966f80589f429a" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 53341dea33f4f3d9b4966f80589f429a Sha1: 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	45.76.148.82 HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Server: nginx Date: Mon, 12 Dec 2022 21:56:28 GMT Content-Length: 965 Connection: keep-alive Location: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (632) Size: 965 Md5: 8f8f1090f724afa001c5f026ed3fcee6 Sha1: 00410a0d705285a24099baf5fc943fb4d1b983f3 Sha256: 945ffbfa960c8a1c640b4966eedec962559d75290f66cf038903f180deb6779f Blocklists: - quad9: Sinkholed
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 12 Dec 2022 21:56:28 GMT content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 12 Dec 2022 21:07:56 GMT age: 2913 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 4435 Cache-Control: max-age=131057 Date: Mon, 12 Dec 2022 21:56:29 GMT Etag: "6396ef2b-1d7" Expires: Wed, 14 Dec 2022 10:20:46 GMT Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT Server: ECS (ska/F719) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: ee19f96e42a0eca99d00c8d91f977c35 Sha1: 3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9 Sha256: 6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: mqwiPlLZ3cBq0+ylQxDGaA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	54.148.242.254 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: BiwolVsQZh2wqdZC9chO9yjaTOI= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /engaff/img/landers/prizewheel-fb/notification.png HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/png server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT content-length: 449 last-modified: Sat, 19 Nov 2022 11:57:55 GMT etag: "1c1-5edd18859c4ef" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 30 x 28, 8-bit colormap, non-interlaced\012- data Size: 449 Md5: bd5203f2cc9e7a9125e4575e029541b0 Sha1: 9fa565ab2f4b55da4735b79e529562252b3c9afe Sha256: db94c8ae725f947f20e12df29e6b6c8ade5ffcd5a7dc9ffd9be0351d963f826f Blocklists: - quad9: Sinkholed
GET /engaff/img/landers/prizewheel-fb/prizewheel_spinner.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT content-length: 32496 last-modified: Sat, 19 Nov 2022 11:57:55 GMT etag: "7ef0-5edd1885cd231" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1002x1002, components 3\012- data Size: 32496 Md5: d4655cba21d806e849eed4e4119fbe1a Sha1: 6453039d85005643e9d65074ca022f63b5d47cdd Sha256: 90f2363aaebaf03f06fb20c6c02fb2e97497d7cd54b611281303ce7e10335ee7 Blocklists: - quad9: Sinkholed
GET /js/pub.min.js HTTP/1.1 Host: push.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site	67.212.184.147 HTTP/2 200 OK content-type: application/javascript server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT content-length: 1482 last-modified: Fri, 09 Sep 2022 11:46:08 GMT vary: Accept-Encoding etag: "631b2780-5ca" content-encoding: gzip expires: Tue, 13 Dec 2022 21:56:29 GMT cache-control: max-age=86400 strict-transport-security: max-age=31536000; includeSubdomains; X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (2752) Size: 1482 Md5: 31c303586c1b78e33984bd252b8e2644 Sha1: 8083e2aad4cbf8242a4e6fb53657d49552b85f82 Sha256: d2c713c2734353dc0ef2896d057021e9b04f35bb7c851d920d390941769c66be Blocklists: - quad9: Sinkholed
GET /engaff/img/prizes/iphone-12-pro-max/default@0.5x.png HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/png server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT content-length: 35519 last-modified: Sat, 19 Nov 2022 11:57:56 GMT etag: "8abf-5edd1886e5699" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data Size: 35519 Md5: 3425f87a8def62d878b3fbf8f930dee2 Sha1: 961688eb1d3c97e9ed61199b0fcd32e60d1d3467 Sha256: 7f9f5fb4a3340704664a8adba3c74c63d425c92999aed97e078bc3b87d06b64d
GET /engaff/img/landers/prizewheel-fb/loader.gif HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/gif server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT content-length: 5083 last-modified: Sat, 19 Nov 2022 11:57:55 GMT etag: "13db-5edd18859c4ef" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 50 x 50\012- data Size: 5083 Md5: ed786659a534e0d183c09a90c50abc9d Sha1: a6c3d90bfaa86a7cda490bc5d04c8939c31a414e Sha256: cbaeb154dcb93bff5f6e382cede5d51a11175a2295e56bb2790611910280ba97 Blocklists: - quad9: Sinkholed
GET /engaff/img/landers/prizewheel-fb/prizewheel_static.png HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/png server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 3370 last-modified: Sat, 19 Nov 2022 11:57:55 GMT etag: "d2a-5edd1885cd231" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 1002 x 1002, 4-bit colormap, non-interlaced\012- data Size: 3370 Md5: dc484e0043b5ff6191b1880c8779863c Sha1: a5b67e3dff3dea3940eed090431aecbb36611b1d Sha256: 30bc059973d84a6e1d22d16747bce062025561f2555cdd9cec012a87866abcb6 Blocklists: - quad9: Sinkholed
GET /engaff/img/profiles/african/female/3@0.25x.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 2727 last-modified: Sat, 19 Nov 2022 11:57:58 GMT etag: "aa7-5edd18886c0a5" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2727 Md5: 2790f79b7e764407ae4b87a9dc30734b Sha1: 30f0a1e4d30ac25108f2d0487f49944fbe630b72 Sha256: 8970ba9af5b39727ac25d42ab540c42ae7f58de4011fadb8efd2f5f317a8d575
GET /engaff/img/profiles/african/male/3@0.25x.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 2518 last-modified: Sat, 19 Nov 2022 11:57:59 GMT etag: "9d6-5edd18899bc0f" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2518 Md5: 2c188d082f97b0a5b29c92dbaf7a9787 Sha1: f2a3828b68ba4d06d450832a977c48a22360d5eb Sha256: afc758b894177d4003b5d02d80cd023429c99cfc3cd880804570d237cf6a96f0
GET /engaff/img/profiles/african/male/10@0.25x.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 2302 last-modified: Sat, 19 Nov 2022 11:57:59 GMT etag: "8fe-5edd18896ce0d" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2302 Md5: 2ec37a714ba9202b2492cc1eff504041 Sha1: 29d005604784110044c80c13610ec1fe946a7d83 Sha256: 278b0f8b52650d39e549fc69ea49d62d3bdd0c41b3ffd939da265842b6e40369
GET /engaff/img/profiles/african/female/6@0.25x.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 2766 last-modified: Sat, 19 Nov 2022 11:57:58 GMT etag: "ace-5edd188897027" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2766 Md5: af242991b9a56424739c63a6bd4090a7 Sha1: 7b41b3b2cfbbe69a865efa8863883bf029738b6e Sha256: c53bda952fa4ca1869dfb4fd7db948ef87f1a8c8f2e6633e2320465f01f0829f
GET /engaff/img/profiles/african/male/9@0.25x.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 3146 last-modified: Sat, 19 Nov 2022 11:57:59 GMT etag: "c4a-5edd18899cbaf" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 3146 Md5: 4c30d4f61201b822adcfa58dbe32389c Sha1: 9d9edd23a3b074135d9e043b5d1e52d8dbe29c91 Sha256: 19d491c137daf159170ed6d6340c33b11806347b18b2e89840989b914346d9f4
GET /engaff/img/prizes/iphone-12-pro-max/proof.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 23152 last-modified: Sat, 19 Nov 2022 11:57:56 GMT etag: "5a70-5edd1886e75d9" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 339x450, components 3\012- data Size: 23152 Md5: 029d38095e06ced0688fd67a58e70781 Sha1: b5bdaddeb39b947c35f883f001f34dd163bcb362 Sha256: 5e41534f027f676ce89db3b87319ffbdc1a1e7515e379f80f476e0989fa4bcc1 Blocklists: - quad9: Sinkholed
GET /engaff/img/profiles/african/female/5@0.25x.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 1960 last-modified: Sat, 19 Nov 2022 11:57:58 GMT etag: "7a8-5edd1888902c7" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 1960 Md5: 732da0e5f3968ec3d9014a6bbb62c04a Sha1: 5d306c8778fdcac19f03542fccaf31df1cb8a783 Sha256: d3eefd5709b25e1bb1129cccb1da22e54816cb2d15a2ed4cfa045b57579a7ef8
GET /engaff/js/app.js?id=0601d5f2aaa1656cef1f HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: application/javascript server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT vary: Accept-Encoding last-modified: Sat, 19 Nov 2022 11:57:53 GMT etag: W/"3d1-5edd1884830e7" content-encoding: br X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (977), with no line terminators Size: 3223 Md5: 4ead4fb49eb2e51c6648de091b74d8a9 Sha1: 730186427371be354706c24362d201c7e5f0c7d4 Sha256: 612e4116f97f3827d61055539bbcf902bdf5a392e4c78e2659bb4761434a2c2a Blocklists: - fortinet: Phishing - quad9: Sinkholed
GET /engaff/img/profiles/african/male/2@0.25x.jpg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT content-length: 2053 last-modified: Sat, 19 Nov 2022 11:57:59 GMT etag: "805-5edd18896aecd" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data Size: 2053 Md5: 0f15632c24d4646c58f30feaa3baaa8a Sha1: a7f319366432f5a63d7f11d30b0a6c9cb6398b64 Sha256: 4118d09fb21a7f34160f470078f6dcba042e8a07e2b4e32de12a4dcd9c5e7da8
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F" Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6436 Expires: Mon, 12 Dec 2022 23:43:46 GMT Date: Mon, 12 Dec 2022 21:56:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 26c6025b12d33a0674edeef8c1491ff6 Sha1: 084f3e27246d3f10c36f8251034a32f71e4905be Sha256: a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F" Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6436 Expires: Mon, 12 Dec 2022 23:43:46 GMT Date: Mon, 12 Dec 2022 21:56:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 26c6025b12d33a0674edeef8c1491ff6 Sha1: 084f3e27246d3f10c36f8251034a32f71e4905be Sha256: a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F" Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6436 Expires: Mon, 12 Dec 2022 23:43:46 GMT Date: Mon, 12 Dec 2022 21:56:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 26c6025b12d33a0674edeef8c1491ff6 Sha1: 084f3e27246d3f10c36f8251034a32f71e4905be Sha256: a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F" Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6436 Expires: Mon, 12 Dec 2022 23:43:46 GMT Date: Mon, 12 Dec 2022 21:56:30 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 26c6025b12d33a0674edeef8c1491ff6 Sha1: 084f3e27246d3f10c36f8251034a32f71e4905be Sha256: a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb38d4a88-9422-41e0-90f0-cc19c2816f8a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6789 x-amzn-requestid: 692cfc2b-ef1e-432b-adc6-cbe71b948ad0 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: dAD7HFCOIAMFk1Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63964d13-6e956e071331a1560d4f6f3f;Sampled=0 x-amzn-remapped-date: Sun, 11 Dec 2022 21:35:15 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: wifDhkBvsB7o6gNlKM_AzEaRmkkOSh853xHnPaDIHe4s2pUXVOP0fw== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google date: Mon, 12 Dec 2022 21:35:15 GMT age: 1275 etag: "646216151e3c1aa66f30c323f0ad19b713dc6b90" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6789 Md5: ccb6f5a22e2436f35e44eb111ecba475 Sha1: 646216151e3c1aa66f30c323f0ad19b713dc6b90 Sha256: 0855d5b41708252c6bdb88382c64c6ed89721523d430333a5816b85f9e901b4b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5530 x-amzn-requestid: adecbb8c-cec3-46a0-b32c-0026b8421fe5 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cw4d8Fg6IAMF61g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63903abf-4bcb385f27cb438c36a2cd5e;Sampled=0 x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:27 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: WNDIG6TS5ADSskNQmMZjuNmw03SwD_NfSBHNFKVkeU0lVM3b9MGKUw== via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google date: Mon, 12 Dec 2022 16:19:06 GMT age: 20244 etag: "0d5969394b370a5c77c53ed58f55e5f8a45da3ab" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5530 Md5: a22fc7807fb3337f0af5e546c7ad366a Sha1: 0d5969394b370a5c77c53ed58f55e5f8a45da3ab Sha256: 98b4f4fd27dc036697fb0328083bce6e691b7493428f3a54991087d9d1165d97
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6311 x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: c8xUYH10oAMF8Ig= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0 x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: fm7OyNybYyYlqhVK8-kNuU1hXUj2dlXJ6NY96wyg8QFYL8RJTSTiaQ== via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google date: Mon, 12 Dec 2022 21:38:45 GMT age: 1065 etag: "2fe69b52fe03128e86550bf08474ecac82682384" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6311 Md5: 2020df3404a4b7c3e142af4a1330b848 Sha1: 2fe69b52fe03128e86550bf08474ecac82682384 Sha256: 37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8841 x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: c5eMWH7MIAMFyow= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0 x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: wk9BI6v5Q6COMKhEiVyGW07a43hO-gddJZdFGb-Miu4LuOa7azKqyQ== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sun, 11 Dec 2022 22:36:02 GMT age: 84028 etag: "abf58087f0e345202da088238daea85d177b431b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8841 Md5: 9051770b3587c195bea670f8820e8cfe Sha1: abf58087f0e345202da088238daea85d177b431b Sha256: f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4720 x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: dAENuF6SoAMF7oQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0 x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: kwweq9Tz-UmF0uP_LKgkPlXwvak8U55ZoBW37FyytkDV0peSujBf5Q== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google date: Sun, 11 Dec 2022 22:16:48 GMT age: 85182 etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4720 Md5: 38876d760ef06c8471468c474c1e28a7 Sha1: d43cd03d5eb3e7618b6fb70c935010c2ac92ad32 Sha256: a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5619 x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: dAEMPFCSIAMF4uA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0 x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google date: Sun, 11 Dec 2022 21:59:55 GMT etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da" age: 86195 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5619 Md5: 9f8d3e3c9e5d2ed74c3894b4825fcc2f Sha1: 6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da Sha256: 9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796
GET /sw.js?v=1670882188764 HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Service-Worker: script Connection: keep-alive Sec-Fetch-Dest: serviceworker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: application/javascript server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT vary: Accept-Encoding last-modified: Mon, 21 Nov 2022 06:32:02 GMT etag: W/"39-5edf536a20142" content-encoding: br X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 828 Md5: 89e406151be7fc048256ee0c33e0540f Sha1: e8a205bcb73174f7152d3a8151b985b858ea1f8b Sha256: 556c720ee1d7109a6c8943633200b3eae3a31ab35bb00e33cf25c4f07ee37c5f Blocklists: - quad9: Sinkholed
GET /engaff/img/fb-like.svg HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: image/svg+xml server: nginx date: Mon, 12 Dec 2022 21:56:30 GMT vary: Accept-Encoding last-modified: Sat, 19 Nov 2022 11:57:53 GMT etag: W/"1213-5edd1883d1521" content-encoding: br X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256: Blocklists: - fortinet: Phishing - quad9: Sinkholed
GET /engaff/js/landers/prizewheel-fb/app.js?id=da05cdf35760d77e97e5 HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: application/javascript server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT vary: Accept-Encoding last-modified: Sat, 19 Nov 2022 11:57:57 GMT etag: W/"24ab5-5edd188821d23" content-encoding: br X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256: Blocklists: - quad9: Sinkholed
GET /engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	45.76.148.82 HTTP/2 200 OK content-type: text/html server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT vary: Accept-Encoding last-modified: Mon, 21 Nov 2022 07:10:58 GMT etag: W/"2edb-5edf5c1dac5d1" content-encoding: br X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256: Blocklists: - quad9: Sinkholed
GET /engaff/css/landers/prizewheel-fb/app.css?id=cd41123a11e97e0f2444 HTTP/1.1 Host: 58.winprizes658.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	45.76.148.82 HTTP/2 200 OK content-type: text/css server: nginx date: Mon, 12 Dec 2022 21:56:29 GMT vary: Accept-Encoding last-modified: Sat, 19 Nov 2022 11:57:54 GMT etag: W/"da7-5edd1884e89ea" content-encoding: br X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256: Blocklists: - fortinet: Phishing - quad9: Sinkholed

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "4B7213EC107CDF1C2CD61A124453FB682EC291AF0004D071105C87E2FE7528F5" 

                                            
                                                
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=15029 

                                            
                                                
Expires: Tue, 13 Dec 2022 02:06:57 GMT 

                                            
                                                
Date: Mon, 12 Dec 2022 21:56:28 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    3c0c53379f331e934f61070074d41035

                                                Sha1:   420f6e542cbf741838566f22e475a80e2f600d21

                                                Sha256: 4b7213ec107cdf1c2cd61a124453fb682ec291af0004d071105c87e2fe7528f5

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB" 

                                            
                                                
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=2874 

                                            
                                                
Expires: Mon, 12 Dec 2022 22:44:22 GMT 

                                            
                                                
Date: Mon, 12 Dec 2022 21:56:28 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    dbd022fec0a71226daaf29b7563a8896

                                                Sha1:   c37d14dc7b3849a4bb815fa325fb5e70fae54039

                                                Sha256: 22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: binary/octet-stream

                                            

                                            
                                                
x-amz-id-2: FV32VnuvZNNKbi6dSSXAbyN3ilzEoc7624aObA2DmZENI8GvfmCDR9p5EnO26cNhZpIkFK64ElsRB8xR+ufmdA== 

                                            
                                                
x-amz-request-id: HZ9QF63Q0DXVTTC3 

                                            
                                                
content-disposition: attachment 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
server: AmazonS3 

                                            
                                                
content-length: 5348 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Mon, 12 Dec 2022 21:51:39 GMT 

                                            
                                                
age: 289 

                                            
                                                
last-modified: Wed, 30 Nov 2022 10:06:34 GMT 

                                            
                                                
etag: "53341dea33f4f3d9b4966f80589f429a" 

                                            
                                                
cache-control: public,max-age=3600 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    53341dea33f4f3d9b4966f80589f429a

                                                Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d

                                                Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Mon, 12 Dec 2022 21:56:28 GMT 

                                            
                                                
content-length: 12 

                                            
                                                
access-control-expose-headers: content-type 

                                            
                                                
access-control-allow-credentials: true 

                                            
                                                
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Age: 4435 

                                            
                                                
Cache-Control: max-age=131057 

                                            
                                                
Date: Mon, 12 Dec 2022 21:56:29 GMT 

                                            
                                                
Etag: "6396ef2b-1d7" 

                                            
                                                
Expires: Wed, 14 Dec 2022 10:20:46 GMT 

                                            
                                                
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT 

                                            
                                                
Server: ECS (ska/F719) 

                                            
                                                
X-Cache: HIT 

                                            
                                                
Content-Length: 471 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    ee19f96e42a0eca99d00c8d91f977c35

                                                Sha1:   3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9

                                                Sha256: 6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12

                                        
                                            GET /engaff/img/profiles/african/female/3@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: 58.winprizes658.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             45.76.148.82

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Mon, 12 Dec 2022 21:56:30 GMT 

                                            
                                                
content-length: 2727 

                                            
                                                
last-modified: Sat, 19 Nov 2022 11:57:58 GMT 

                                            
                                                
etag: "aa7-5edd18886c0a5" 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   2727

                                                Md5:    2790f79b7e764407ae4b87a9dc30734b

                                                Sha1:   30f0a1e4d30ac25108f2d0487f49944fbe630b72

                                                Sha256: 8970ba9af5b39727ac25d42ab540c42ae7f58de4011fadb8efd2f5f317a8d575

                                        
                                            GET /engaff/img/profiles/african/male/10@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: 58.winprizes658.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             45.76.148.82

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Mon, 12 Dec 2022 21:56:30 GMT 

                                            
                                                
content-length: 2302 

                                            
                                                
last-modified: Sat, 19 Nov 2022 11:57:59 GMT 

                                            
                                                
etag: "8fe-5edd18896ce0d" 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   2302

                                                Md5:    2ec37a714ba9202b2492cc1eff504041

                                                Sha1:   29d005604784110044c80c13610ec1fe946a7d83

                                                Sha256: 278b0f8b52650d39e549fc69ea49d62d3bdd0c41b3ffd939da265842b6e40369

                                        
                                            GET /engaff/img/profiles/african/male/9@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: 58.winprizes658.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             45.76.148.82

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Mon, 12 Dec 2022 21:56:30 GMT 

                                            
                                                
content-length: 3146 

                                            
                                                
last-modified: Sat, 19 Nov 2022 11:57:59 GMT 

                                            
                                                
etag: "c4a-5edd18899cbaf" 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   3146

                                                Md5:    4c30d4f61201b822adcfa58dbe32389c

                                                Sha1:   9d9edd23a3b074135d9e043b5d1e52d8dbe29c91

                                                Sha256: 19d491c137daf159170ed6d6340c33b11806347b18b2e89840989b914346d9f4

                                        
                                            GET /engaff/img/profiles/african/female/5@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: 58.winprizes658.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             45.76.148.82

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Mon, 12 Dec 2022 21:56:30 GMT 

                                            
                                                
content-length: 1960 

                                            
                                                
last-modified: Sat, 19 Nov 2022 11:57:58 GMT 

                                            
                                                
etag: "7a8-5edd1888902c7" 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   1960

                                                Md5:    732da0e5f3968ec3d9014a6bbb62c04a

                                                Sha1:   5d306c8778fdcac19f03542fccaf31df1cb8a783

                                                Sha256: d3eefd5709b25e1bb1129cccb1da22e54816cb2d15a2ed4cfa045b57579a7ef8

                                        
                                            GET /engaff/img/profiles/african/male/2@0.25x.jpg HTTP/1.1 

                                        
                                            
Host: 58.winprizes658.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             45.76.148.82

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Mon, 12 Dec 2022 21:56:30 GMT 

                                            
                                                
content-length: 2053 

                                            
                                                
last-modified: Sat, 19 Nov 2022 11:57:59 GMT 

                                            
                                                
etag: "805-5edd18896aecd" 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3\012- data

                                                Size:   2053

                                                Md5:    0f15632c24d4646c58f30feaa3baaa8a

                                                Sha1:   a7f319366432f5a63d7f11d30b0a6c9cb6398b64

                                                Sha256: 4118d09fb21a7f34160f470078f6dcba042e8a07e2b4e32de12a4dcd9c5e7da8

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F" 

                                            
                                                
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=6436 

                                            
                                                
Expires: Mon, 12 Dec 2022 23:43:46 GMT 

                                            
                                                
Date: Mon, 12 Dec 2022 21:56:30 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    26c6025b12d33a0674edeef8c1491ff6

                                                Sha1:   084f3e27246d3f10c36f8251034a32f71e4905be

                                                Sha256: a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F" 

                                            
                                                
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=6436 

                                            
                                                
Expires: Mon, 12 Dec 2022 23:43:46 GMT 

                                            
                                                
Date: Mon, 12 Dec 2022 21:56:30 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    26c6025b12d33a0674edeef8c1491ff6

                                                Sha1:   084f3e27246d3f10c36f8251034a32f71e4905be

                                                Sha256: a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49a0678c-8bda-434a-a337-63696994d79c.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 5530 

                                            
                                                
x-amzn-requestid: adecbb8c-cec3-46a0-b32c-0026b8421fe5 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cw4d8Fg6IAMF61g= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-63903abf-4bcb385f27cb438c36a2cd5e;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:27 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: WNDIG6TS5ADSskNQmMZjuNmw03SwD_NfSBHNFKVkeU0lVM3b9MGKUw== 

                                            
                                                
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 12 Dec 2022 16:19:06 GMT 

                                            
                                                
age: 20244 

                                            
                                                
etag: "0d5969394b370a5c77c53ed58f55e5f8a45da3ab" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5530

                                                Md5:    a22fc7807fb3337f0af5e546c7ad366a

                                                Sha1:   0d5969394b370a5c77c53ed58f55e5f8a45da3ab

                                                Sha256: 98b4f4fd27dc036697fb0328083bce6e691b7493428f3a54991087d9d1165d97

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8841 

                                            
                                                
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: c5eMWH7MIAMFyow= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: wk9BI6v5Q6COMKhEiVyGW07a43hO-gddJZdFGb-Miu4LuOa7azKqyQ== 

                                            
                                                
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Sun, 11 Dec 2022 22:36:02 GMT 

                                            
                                                
age: 84028 

                                            
                                                
etag: "abf58087f0e345202da088238daea85d177b431b" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8841

                                                Md5:    9051770b3587c195bea670f8820e8cfe

                                                Sha1:   abf58087f0e345202da088238daea85d177b431b

                                                Sha256: f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 5619 

                                            
                                                
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: dAEMPFCSIAMF4uA= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                            
                                                
x-cache: Miss from cloudfront 

                                            
                                                
x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg== 

                                            
                                                
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Sun, 11 Dec 2022 21:59:55 GMT 

                                            
                                                
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da" 

                                            
                                                
age: 86195 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5619

                                                Md5:    9f8d3e3c9e5d2ed74c3894b4825fcc2f

                                                Sha1:   6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da

                                                Sha256: 9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796

URL	58.winprizes658.monster/engaff/phaff2022n4.html?city=Mountain%20View&model=Pixel%204&brand=Google&cep=K0-aSCnRIRqVhAEY3BN5xSb-_bpJLw3NiaLe4hc6uh6teuWBrhICJvgYXMEWWKkKLJdA4imesMXUcNfOhuEQjrv7h7xkt0MQ3wF32nLNl90eWTUOFnouxQSQgTcFFNT3NBH0iSNHkEmCLTtPxyfBBAQyfSV6A72kA1j2DU1Rp36EHlMrWTCoaK5CdI0MN-UvttXe98iq-pYa9Y7-QV5sxYy_BZhu7Cdeh5DfP59-v5xxSy9ivP36g1L7sgKq95vGYNwBp_LG1hGF5oeMBGWG662mxtGaQ7x6VRHhnGicPuo0c-EnfYKSf6pu7iNXhk41tN1VlNUYpDiSJw9lhL0QkP7kTfjRvqS_MXhXk_8esa5OWGXn0xtNis5MiXA1-pF1g1XJRPNrQNm_HMZ8te3Fb2IO0mu32Pm5Oq0Sisr9CGA&lptoken=168570b488d439b37008
IP	45.76.148.82 (Singapore)
ASN	#20473 AS-CHOOPA
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access
Report completed	2022-12-12 21:56:39 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	16
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (9)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.76.148.82

Last 5 reports on ASN: AS-CHOOPA

Last 5 reports on domain: winprizes658.monster

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (8)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (40)

Overview

Domain Summary (9)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.76.148.82

Last 5 reports on ASN: AS-CHOOPA

Last 5 reports on domain: winprizes658.monster

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (8)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (40)

Network Intrusion Detection Systems