chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/index.html?campaign_id=1a920fa5-3930-4c63-a8a3-10a036217001&landing_page_id=4e694aa0-75e8-4f61-891a-cd739d65f295&key=eyJ0aW1lc3RhbXAiOiIxNzAxNTAwMDE3IiwiaGFzaCI6ImI5NzQ1NjJjZGIxOWI4NDllMzJhMDY4ZWMyZmM3MTMwMmI1MjZhMTQifQ==&bemobdata=c=1a920fa5-3930-4c63-a8a3-10a036217001..l=4e694aa0-75e8-4f61-891a-cd739d65f295..a=0..b=0..r=cb7zj.bemobtrcks.com..ts=1701500018303
54.230.111.26 12 kB URL chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/index.html?campaign_id=1a920fa5-3930-4c63-a8a3-10a036217001&landing_page_id=4e694aa0-75e8-4f61-891a-cd739d65f295&key=eyJ0aW1lc3RhbXAiOiIxNzAxNTAwMDE3IiwiaGFzaCI6ImI5NzQ1NjJjZGIxOWI4NDllMzJhMDY4ZWMyZmM3MTMwMmI1MjZhMTQifQ==&bemobdata=c=1a920fa5-3930-4c63-a8a3-10a036217001..l=4e694aa0-75e8-4f61-891a-cd739d65f295..a=0..b=0..r=cb7zj.bemobtrcks.com..ts=1701500018303
IP 54.230.111.26:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32821), with CRLF, LF line terminators
Hash 404451c1ae25363abcbd3618ff7c0eb1
b0df42ac07d2edee17bde917fc80d4f0919458a8
72260ee5bbce74646e64de72eeeddd6d81f7d12d0d33b75fe299afc5516262e0
GET /hotmart/fr/mb/eval-remun/lp1/index.html?campaign_id=1a920fa5-3930-4c63-a8a3-10a036217001&landing_page_id=4e694aa0-75e8-4f61-891a-cd739d65f295&key=eyJ0aW1lc3RhbXAiOiIxNzAxNTAwMDE3IiwiaGFzaCI6ImI5NzQ1NjJjZGIxOWI4NDllMzJhMDY4ZWMyZmM3MTMwMmI1MjZhMTQifQ==&bemobdata=c=1a920fa5-3930-4c63-a8a3-10a036217001..l=4e694aa0-75e8-4f61-891a-cd739d65f295..a=0..b=0..r=cb7zj.bemobtrcks.com..ts=1701500018303 HTTP/1.1
Host: chance2win.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
date: Fri, 01 Dec 2023 10:05:20 GMT
last-modified: Fri, 01 Dec 2023 09:54:59 GMT
etag: W/"404451c1ae25363abcbd3618ff7c0eb1"
x-amz-server-side-encryption: AES256
x-amz-version-id: 8plRDhILPOYdcHOrkOkjcgEPueTlHbaB
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jah60KH2USHwJnjn7nY15uY9mpXtjDIHwrp_RzBK33ZzycwRp80BaA==
age: 74922
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/crypto-js/3.1.9-1/crypto-js.min.js
104.17.25.14 14 kB URL cdnjs.cloudflare.com/ajax/libs/crypto-js/3.1.9-1/crypto-js.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (32008)
Hash a39fc84fa7659e1d898bbcddf20aa989
5989527a378b55011a59522f41eeb3981518325c
bba05a999896e6d09e9a37b69ebb5e282d8aa0b20a5fd94a3d2a6f0a43a16a6c
GET /ajax/libs/crypto-js/3.1.9-1/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 02 Dec 2023 06:54:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 13696
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-bb47"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 874255
expires: Thu, 21 Nov 2024 06:54:02 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sPn5MSSUB%2B6rbLcZnhGEqjFJMbxXy2RcwPIHJZrnIU9I3KguqJ2ykNsyxM7a3jbhKZHPwZ6R9o6vdME6dL4NULPhyy8vTYspwreIicS9XHuAxkQm6CsgI5XZFv3Wqr3d1St2qJYP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82f1a80229195697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/js/polyfill.min.js
54.230.111.26 28 kB URL chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/js/polyfill.min.js
IP 54.230.111.26:0
File type ASCII text, with very long lines (32028)
Hash 0d3d3a8d5ce052a3f80501f80c0f90a6
54913e6bddafcde006cced2e361ae62466acea8b
06ea0ab915bbf69c314ac77c44fdc94fff87acabf904a01cc0b9b23fddf4863d
GET /hotmart/fr/mb/eval-remun/lp1/js/polyfill.min.js HTTP/1.1
Host: chance2win.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/index.html?campaign_id=1a920fa5-3930-4c63-a8a3-10a036217001&landing_page_id=4e694aa0-75e8-4f61-891a-cd739d65f295&key=eyJ0aW1lc3RhbXAiOiIxNzAxNTAwMDE3IiwiaGFzaCI6ImI5NzQ1NjJjZGIxOWI4NDllMzJhMDY4ZWMyZmM3MTMwMmI1MjZhMTQifQ==&bemobdata=c=1a920fa5-3930-4c63-a8a3-10a036217001..l=4e694aa0-75e8-4f61-891a-cd739d65f295..a=0..b=0..r=cb7zj.bemobtrcks.com..ts=1701500018303
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 01 Dec 2023 10:05:20 GMT
last-modified: Fri, 01 Dec 2023 09:55:00 GMT
etag: W/"0d3d3a8d5ce052a3f80501f80c0f90a6"
x-amz-server-side-encryption: AES256
x-amz-version-id: f8JiSNMTxnQGz4iIWUUmJvf1uBGpBcyL
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6bGmEiwX4mNa5i84twKfZf5boZzU-gV0-ax8glIsZ0wDdkHtliDZeA==
age: 74922
X-Firefox-Spdy: h2
chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/js/simplePage.acc1998250899a11442a.js
54.230.111.26 100 kB URL chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/js/simplePage.acc1998250899a11442a.js
IP 54.230.111.26:0
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 9e52175161b92086f9c17750ddd6962e
66ad634994e864b70c7dc5807f77882164fc2a98
385e35204b4e7f98859d3d5c73f61f71862f2fd8a30f136a849d1ff82615baac
GET /hotmart/fr/mb/eval-remun/lp1/js/simplePage.acc1998250899a11442a.js HTTP/1.1
Host: chance2win.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/index.html?campaign_id=1a920fa5-3930-4c63-a8a3-10a036217001&landing_page_id=4e694aa0-75e8-4f61-891a-cd739d65f295&key=eyJ0aW1lc3RhbXAiOiIxNzAxNTAwMDE3IiwiaGFzaCI6ImI5NzQ1NjJjZGIxOWI4NDllMzJhMDY4ZWMyZmM3MTMwMmI1MjZhMTQifQ==&bemobdata=c=1a920fa5-3930-4c63-a8a3-10a036217001..l=4e694aa0-75e8-4f61-891a-cd739d65f295..a=0..b=0..r=cb7zj.bemobtrcks.com..ts=1701500018303
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 01 Dec 2023 10:05:21 GMT
last-modified: Fri, 01 Dec 2023 09:55:03 GMT
etag: W/"9e52175161b92086f9c17750ddd6962e"
x-amz-server-side-encryption: AES256
x-amz-version-id: TRaBtVXezYNsEELNB7FFDXy96S4G6utD
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6N3_piw_I5mTWx4ZMp4lwMAG6IL2NaJvIz3aWmvPfvvudRszVxO8Lg==
age: 74922
X-Firefox-Spdy: h2
chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/js/vendors~simplePage.d9652b592072ee81ab0f.js
54.230.111.26 296 kB URL chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/js/vendors~simplePage.d9652b592072ee81ab0f.js
IP 54.230.111.26:0
File type Unicode text, UTF-8 text, with very long lines (65431)
Size 296 kB (295790 bytes)
Hash 15151e46289bce277b6a3d356ff8db07
5510e263c97c1570b1abfb5405b5124cc904e7a9
f39f28395700a1e57e0d25aa73482f7d72b6f0e9416af3772d0e0b92f225ac04
GET /hotmart/fr/mb/eval-remun/lp1/js/vendors~simplePage.d9652b592072ee81ab0f.js HTTP/1.1
Host: chance2win.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/index.html?campaign_id=1a920fa5-3930-4c63-a8a3-10a036217001&landing_page_id=4e694aa0-75e8-4f61-891a-cd739d65f295&key=eyJ0aW1lc3RhbXAiOiIxNzAxNTAwMDE3IiwiaGFzaCI6ImI5NzQ1NjJjZGIxOWI4NDllMzJhMDY4ZWMyZmM3MTMwMmI1MjZhMTQifQ==&bemobdata=c=1a920fa5-3930-4c63-a8a3-10a036217001..l=4e694aa0-75e8-4f61-891a-cd739d65f295..a=0..b=0..r=cb7zj.bemobtrcks.com..ts=1701500018303
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 01 Dec 2023 10:05:21 GMT
last-modified: Fri, 01 Dec 2023 09:55:06 GMT
etag: W/"15151e46289bce277b6a3d356ff8db07"
x-amz-server-side-encryption: AES256
x-amz-version-id: IEf5Dq.6RAX9O47yeKo.MLyn_fZoAlRM
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _3SpmrJN-H_lxxE5IfpJm6jbsKxhqtr-doSaNxYbCKd8ZTcvVWoCaQ==
age: 74922
X-Firefox-Spdy: h2
chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/css/all.min.css
54.230.111.26 145 kB URL chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/css/all.min.css
IP 54.230.111.26:0
File type ASCII text, with very long lines (65360)
Size 145 kB (144843 bytes)
Hash e0167aaf27da43def8c2a90be0fa0e1a
caa9094149cfae69d3146c7f987752512ffab5ea
5c187c020b62e9ef7262a6429991ca29348f59d3df1b3ce51eca2d5d7dcb6c74
GET /hotmart/fr/mb/eval-remun/lp1/css/all.min.css HTTP/1.1
Host: chance2win.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/index.html?campaign_id=1a920fa5-3930-4c63-a8a3-10a036217001&landing_page_id=4e694aa0-75e8-4f61-891a-cd739d65f295&key=eyJ0aW1lc3RhbXAiOiIxNzAxNTAwMDE3IiwiaGFzaCI6ImI5NzQ1NjJjZGIxOWI4NDllMzJhMDY4ZWMyZmM3MTMwMmI1MjZhMTQifQ==&bemobdata=c=1a920fa5-3930-4c63-a8a3-10a036217001..l=4e694aa0-75e8-4f61-891a-cd739d65f295..a=0..b=0..r=cb7zj.bemobtrcks.com..ts=1701500018303
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 01 Dec 2023 10:05:21 GMT
last-modified: Fri, 01 Dec 2023 09:55:08 GMT
etag: W/"e0167aaf27da43def8c2a90be0fa0e1a"
x-amz-server-side-encryption: AES256
x-amz-version-id: 8SDJxJgv3nrPyZr9zXvGtAvu4vBw2TCp
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V-hqwR-Rte78cr6d6TC3gglS2PdFNzaH2EMybbfW9T8wOIb9t4iBzQ==
age: 74922
X-Firefox-Spdy: h2
d3syewzhvzylbl.cloudfront.net/fonts/google-fonts/fredokaone/regular.woff2
143.204.42.50 16 kB URL d3syewzhvzylbl.cloudfront.net/fonts/google-fonts/fredokaone/regular.woff2
IP 143.204.42.50:0
File type Web Open Font Format (Version 2), TrueType, length 15884, version 1.65\012- data
Hash 1ecc776a7c33c6534ff96cda191d339f
7eb2f92fa13260f63d17dce4445783916a0c4fcf
e1b0380634c0b8a9e18053215ab5ca891299c56d11310740dee27cc555c266a3
GET /fonts/google-fonts/fredokaone/regular.woff2 HTTP/1.1
Host: d3syewzhvzylbl.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chance2win.xyz
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: font/woff2
content-length: 15884
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 31536000
last-modified: Fri, 14 Apr 2023 06:23:37 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Fri, 01 Dec 2023 07:36:39 GMT
etag: "1ecc776a7c33c6534ff96cda191d339f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BSQg13kJ7Afrs7yo5cz2J2jj04UhBmEepX_vZeZXMlxy5Kyfporrlg==
age: 83844
X-Firefox-Spdy: h2
deehalig.net/zone?&pub=0&zone_id=5152006&is_mobile=false&domain=chance2win.xyz&var=null&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
139.45.197.251 0 B URL deehalig.net/zone?&pub=0&zone_id=5152006&is_mobile=false&domain=chance2win.xyz&var=null&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP 139.45.197.251:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /zone?&pub=0&zone_id=5152006&is_mobile=false&domain=chance2win.xyz&var=null&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: deehalig.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://chance2win.xyz
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 02 Dec 2023 06:54:03 GMT
content-length: 0
x-trace-id: e69192241bb9971d4d5bd97c0e6067aa
access-control-allow-origin: https://chance2win.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
d2543nuuc0wvdg.cloudfront.net/favicon.ico
54.230.241.188 108 kB URL d2543nuuc0wvdg.cloudfront.net/favicon.ico
IP 54.230.241.188:0
File type MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Size 108 kB (107684 bytes)
Hash f55949ec10d9a837c0602a861265edff
2bf72350e2641e7cd82ab741b6f4e9dc3ad648cc
9a3f31746c28415015a70910ee9cfbe1c02badc387864d917d12da0027f18c11
GET /favicon.ico HTTP/1.1
Host: d2543nuuc0wvdg.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/x-icon
content-length: 107684
last-modified: Fri, 21 May 2021 09:07:36 GMT
accept-ranges: bytes
server: AmazonS3
date: Fri, 01 Dec 2023 07:35:05 GMT
etag: "f55949ec10d9a837c0602a861265edff"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w6wRdexRXv0BIFBI_L5pDaYEc7IeFOdp7vwKJIP5tTOL3_vONn1GYg==
age: 84888
X-Firefox-Spdy: h2
chance2win.xyz/sw-check-permissions-d8503.js?var=null
54.230.111.26 566 B URL chance2win.xyz/sw-check-permissions-d8503.js?var=null
IP 54.230.111.26:0
Hash 044c9b740d100e6615166db177402377
a5d56782b99640cafd6b7d2043ba7c5f45f166d6
e79c6c7ed471134d3a1280ff2912852f850f12a0bf31f089bd07b032e7380045
GET /sw-check-permissions-d8503.js?var=null HTTP/1.1
Host: chance2win.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://chance2win.xyz/hotmart/fr/mb/eval-remun/lp1/index.html?campaign_id=1a920fa5-3930-4c63-a8a3-10a036217001&landing_page_id=4e694aa0-75e8-4f61-891a-cd739d65f295&key=eyJ0aW1lc3RhbXAiOiIxNzAxNTAwMDE3IiwiaGFzaCI6ImI5NzQ1NjJjZGIxOWI4NDllMzJhMDY4ZWMyZmM3MTMwMmI1MjZhMTQifQ==&bemobdata=c=1a920fa5-3930-4c63-a8a3-10a036217001..l=4e694aa0-75e8-4f61-891a-cd739d65f295..a=0..b=0..r=cb7zj.bemobtrcks.com..ts=1701500018303
Cookie: counter_start_time_12735325_1701424008465=1701500228408
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 566
last-modified: Thu, 09 Jun 2022 13:16:10 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Fri, 01 Dec 2023 12:19:02 GMT
etag: "044c9b740d100e6615166db177402377"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5bWfYFnoIdFzoSsWNwNTvy_t6FbrcEJELqMTvht7LWY6pRxweJo-Yw==
age: 66902
X-Firefox-Spdy: h2